mícrosoft
Redmond is "listening closely to the views of European governments and leaders."
"We have improved our ability to detect forged tokens and are expanding asynchronous validation to additional Microsoft workloads. We are partitioning critical infrastructure identity keys to reduce impact if they are compromised"
Attackers targeting MSPs, technology providers, cloud application firms to hit customers downstream. Look out for "anomalous Graph calls to Exchange"
"Insecure out of the box, with misconfigurations and toxic permission combinations" yet absolutely embedded everywhere...
Lighter than last month, mercifully, but still some urgent fixes.
European cloud consortium bewails lack of progress as Redmond says its demands “go beyond the product requirements and characteristics defined in the MOU”
"The elephant in the room has gone unaddressed: sky-high cloud credits are the most damaging method..."