Hate to disillusion you - but exactly this happened to us on AWS a couple of years ago. 1 months research compute - no biggie, but no more AWS for us either.
To counterpoint this with 'not for thee, but for me.' If you are spending > $1m/yr with AWS this will never happen. The decisions need to go through a TAM who will block this kind of thing.
For smaller users I can imagine this sort of thing happens pretty regularly with every cloud, even smaller ones.
Please reply if you had a TAM and were spending that much! I'd be personally interested to hear that was the case.
No, we had the lowest tier (research - funding is an issue) - but more seriously SME's will get trapped in this as well, and if I had $1m/yr I would definitely be running my own datacenter.
They offered to investigate if we paid for support, I counter-offered with not using the chat script in one of my courses as an example of AWS customer "support", and we ended up getting a full refund at least.
3 of those are about Exchange and one is about Bing (involving AAD, but it was an AAD app that was misconfigured and not an AAD issue itself). The teams that run Azure are in entirely separate organizations with wildly different product stacks.
Exchange has a bunch of decades old infrastructure and is a security nightmare afaik. Dunno much about Bing.
The "org chart" graphic with MS orgs all pointing guns at each other is real shit. Different orgs have very different security postures, and Azure's is much stronger than others.
Comments
The choice of cloud operators is down to two. How is it that google can totally screw up so badly?
Hate to disillusion you - but exactly this happened to us on AWS a couple of years ago. 1 months research compute - no biggie, but no more AWS for us either.
To counterpoint this with 'not for thee, but for me.' If you are spending > $1m/yr with AWS this will never happen. The decisions need to go through a TAM who will block this kind of thing.
For smaller users I can imagine this sort of thing happens pretty regularly with every cloud, even smaller ones.
Please reply if you had a TAM and were spending that much! I'd be personally interested to hear that was the case.
No, we had the lowest tier (research - funding is an issue) - but more seriously SME's will get trapped in this as well, and if I had $1m/yr I would definitely be running my own datacenter.
They offered to investigate if we paid for support, I counter-offered with not using the chat script in one of my courses as an example of AWS customer "support", and we ended up getting a full refund at least.
You mean AWS and Azure?
Azure has a very bad reputation for terrible security, although weirdly a lot of enterprises don't seem to care. :(
Where can we fund more information about this?
There are so many that it's just not funny. :(
• https://www.nbcnews.com/tech/security/scathing-federal-repor...
• https://www.wiz.io/blog/bingbang
• https://www.theverge.com/2023/7/12/23792371/security-breach-...
• https://www.wiz.io/blog/midnight-blizzard-microsoft-breach-a...
These are just the first few I've found for the last 12 months.
There are more if you go back even 12 months further, and I'm pretty sure the above aren't the complete list for the last year anyway.
Microsoft are actually really bad at this Cloud "security" thing. :( :( :(
3 of those are about Exchange and one is about Bing (involving AAD, but it was an AAD app that was misconfigured and not an AAD issue itself). The teams that run Azure are in entirely separate organizations with wildly different product stacks.
Exchange has a bunch of decades old infrastructure and is a security nightmare afaik. Dunno much about Bing.
The "org chart" graphic with MS orgs all pointing guns at each other is real shit. Different orgs have very different security postures, and Azure's is much stronger than others.
Source: spent some time at MS
Probably because Azure is cheaper than AWS and I am sure MS might be throwing some freebies/discounts if the customer is using Enterprise Office.