Microsoft president tells lawmakers 'red lines' needed for nation-state attacks

Jonathan Greig

Source Link

Microsoft president Brad Smith testified before a congressional committee on Thursday, at times accepting responsibility for the company’s recent cybersecurity mistakes while simultaneously deflecting criticism of the tech giant’s practices. He also called on the government to create "consequences" for nation-state hackers who compromise U.S. systems.

The House Homeland Security Committee brought Smith in to discuss a recent DHS report on a 2023 incident where hackers allegedly tied to China’s government breached the email accounts of senior U.S. government leaders.

The Cyber Safety Review Board (CSRB) behind the report concluded the intrusion “should never have happened,” and throughout their review they “identified a series of Microsoft operational and strategic decisions that collectively point to a corporate culture that deprioritized both enterprise security investments and rigorous risk management.”