Microsoft shares details of security breach that contained roughly 250 million entries

Microsoft shared details surrounding a security breach from last Dec that involved roughly 250 million entries. The data came from an internal customer back up database consisting of mostly anonymized user analytics. The information was exposed between December 5 and December 31. Microsoft discloses the details surrounding the breach in a blog post.

Bob Diachenko, a security researcher with Security Discovery, spotted the security breach and alerted Microsoft of the issue. Diachenko shared more than details on Twitter. Diachenko pointed out that Microsoft jumped on the issue quickly and solved information technology within a day, even though it was New year's Eve.

Diachenko spoke to ZDNet and specified that the database consisted of a cluster of five Elasticsearch servers. The five servers stored the same data.

Microsoft's investigation establish no malicious use of the data, and Microsoft points out that the "vast bulk of records were cleared of personal data in accordance with our standard practices." There were exceptions, however, in which case, people'due south personal data was exposed. Microsoft states that "if the information [was] in a not-standard format, such as an electronic mail address separated with spaces instead of written in a standard format (for example, "XYZ @contoso com" vs "XYZ@contoso.com)" and then personal data may have remained unredacted. Microsoft already began notifying people whose data was not anonymized.

Microsoft will have a series of actions to reduce the chances of a similar breach happening in the future, every bit outlined in its blog mail service:

• Auditing the established network security rules for internal resources.
• Expanding the telescopic of the mechanisms that detect security rule misconfigurations.
• Adding additional alerting to service teams when security rule misconfigurations are detected.
• Implementing additional redaction automation.

Microsoft states that the security breach occurred due to misconfigured Azure security rules that were deployed on Dec 5, which accept since been fixed.

We may earn a committee for purchases using our links. Learn more.

UH OH

An net connectedness will soon exist required when setting up Windows eleven Pro

Microsoft has appear that later this yr, users will be required to connect to the internet and sign-in with a Microsoft Account during the out of box setup experience on Windows 11 Pro. Microsoft has already been enforcing this requirement on Windows 11 Home since launch last Oct, and Windows 11 Pro is now expected to follow suit presently.

I like 'em big ... I like 'em mesomorphic

These are the best gaming mice for folks with big hands

A great gaming mouse is important for anyone looking to become into PC gaming. Notwithstanding, if you have large hands, you may struggle to detect a mouse that feels comfortable for you. Thankfully, in that location are plenty of plus-sized mouse options on the marketplace.

Source: https://www.windowscentral.com/microsoft-shares-details-security-breach-contained-roughly-250-million-entries

Posted by: harrisseatomint.blogspot.com

Share this post