3 of those are about Exchange and one is about Bing (involving AAD, but it was an AAD app that was misconfigured and not an AAD issue itself). The teams that run Azure are in entirely separate organizations with wildly different product stacks.
Exchange has a bunch of decades old infrastructure and is a security nightmare afaik. Dunno much about Bing.
The "org chart" graphic with MS orgs all pointing guns at each other is real shit. Different orgs have very different security postures, and Azure's is much stronger than others.
Comments
Azure has a very bad reputation for terrible security, although weirdly a lot of enterprises don't seem to care. :(
Where can we fund more information about this?
There are so many that it's just not funny. :(
• https://www.nbcnews.com/tech/security/scathing-federal-repor...
• https://www.wiz.io/blog/bingbang
• https://www.theverge.com/2023/7/12/23792371/security-breach-...
• https://www.wiz.io/blog/midnight-blizzard-microsoft-breach-a...
These are just the first few I've found for the last 12 months.
There are more if you go back even 12 months further, and I'm pretty sure the above aren't the complete list for the last year anyway.
Microsoft are actually really bad at this Cloud "security" thing. :( :( :(
3 of those are about Exchange and one is about Bing (involving AAD, but it was an AAD app that was misconfigured and not an AAD issue itself). The teams that run Azure are in entirely separate organizations with wildly different product stacks.
Exchange has a bunch of decades old infrastructure and is a security nightmare afaik. Dunno much about Bing.
The "org chart" graphic with MS orgs all pointing guns at each other is real shit. Different orgs have very different security postures, and Azure's is much stronger than others.
Source: spent some time at MS
Probably because Azure is cheaper than AWS and I am sure MS might be throwing some freebies/discounts if the customer is using Enterprise Office.