Microsoft takes pains to obscure role in 0-days that caused email breach
It's starting to feel to me like modern day Microsoft has some kind of a Teflon coating. In the last month alone they've had their flagship cloud services down for extended periods of time due to DDoS attacks, had their auth cookie signing keys compromised and abused at scale, and had a lawsuit reveal emails about how they were planning to use their cash at hand to buy all the content and destroy's Sony's gaming business.And none of it has any impact, nobody seems to care.The comments in this thread are crazy to me. Yes, dealing with targeted attacks by nation states is hard, and occasionally you'll fail. But that's part of the reason to pay Microsoft rather than try to host your own. In that situation the absolute minimum expectation is for MS to follow basic best practices. Nothing about this story suggests they've been doing that, it's just one wtf after another.And their communication on this has been so bad an unclear that it has to have been intentionally obfuscatory.