Shulou(Shulou.com)11/24 Report--

CTOnews.com, August 4 (Xinhua) Amit Yoran, CEO of cyber security company Tenable, recently wrote on the LinkedIn platform, accusing Microsoft of being "very irresponsible" in terms of security, lack of transparency and exposing customers to risks.

Tenable, based in Baltimore, reported to Microsoft in March a problem with cross-tenant (cross-tenant) applications in Azure services that gave hackers unauthorized access to sensitive data and demonstrated access to sensitive data from a financial institution.

However, Tenable was very dissatisfied with the time Microsoft took to fix the BUG. It not only took as long as 3 months, but also the patches released could not be completely fixed.

If financial institutions are still running the old version, there is still a risk of serious data breaches. Yolan is highly critical of the way Microsoft handled the issue.

The translation content of CTOnews.com is as follows:

It's been more than 120 days since we reported the problem, but Microsoft still hasn't initiated enough effective measures to contain the vulnerability.

More importantly, customers do not know if they have vulnerabilities and are unable to make informed decisions on compensation controls and other risk mitigation measures.

Microsoft says it will solve the problem by the end of September, and if this is not an obvious oversight, it shows that Microsoft is very irresponsible in terms of security.

Microsoft responded that dealing with security vulnerabilities requires thorough investigation, identification of affected products and versions, as well as testing compatibility between other operating systems and applications, so the whole process is long.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.