What kind of Tard uses a Microsoft Cloud account?
Someone who does government business on a personal email system?
Not a defect -— a FEATURE!
Give an economic enemy your secrets without leaving your digital fingerprints on the gift.
Probably getting stuck translating and interpreting “10 percent to the Big Guy”
Gina Raimondo, a crack commerce expert selected for her competence
I assume they mean MS Azure but I would imagine MS uses Azure to host MS 365, Office 365, OneDrive and all their online apps. I think over half of all businesses use one of those MS services/apps.
The small company I work for does. I use it as little as possible and for personal use, I have web hosting and run NextCloud. Even then, nothing crucial or identifying is on it. My biggest use for it is to share gardening literature with FReepers on the weekly gardening threads. All the literature can be found freely on the web. I collected and organized it over the years.
As of a couple years ago, about 75% of corporate email users in the US were hosted on by Microsoft on Office 365; the Microsoft cloud. Information Security is an illusion that corporations spend BILLIONS of dollars each year trying to maintain.
Too many unfortunately. When I do security consulting and the topic of public clouds comes up I usually get a response similar to “but brawndo has electrolytes”. As long as they have been informed my job is technically done. Many users are caught on the illusion of security because of X parent company, no matter how many times that company has been exploited. Typically it isn’t until the user company has been directly effected in a negative way do we get the green light start making recommended changes and hardening.
Most of the US government is switching to cloud services.
The problem is that genunine technical experts have almost no input into govenrment contracting decisions for procurement of standard commercial contracts. But burueacrats get to specify lots of special requriements that may or may not actually provide something the government needs. Meanwhile it will often be overly prescriptive so that the car that was sold will have all the required parts, gone through all the necessary contactor assured test, but the engine won’t run after 1,000 miles or some such.
Detected - did not prevent at the outset. The problem with government computing security is that it is not designed first to keep out all unauthorized folks.