A recent Bloomberg article, noted that Russian hackers breached Microsoft’s security again, gaining access to customer emails. The hackers, identified as Midnight Blizzard (also known as APT29 or Cozy Bear), are linked to Russian foreign intelligence. This breach targeted communications between corporate executives and their customers, adding to a growing list of security failures for Microsoft.
The lack of prominent media coverage on these issues is troubling. This latest article was buried deep in Bloomberg’s website, with similar stories also hidden in the Wall Street Journal, New York Times, and Financial Times. It’s alarming how little attention these significant breaches receive, especially considering how many American businesses rely on Microsoft services.
Midnight Blizzard was also responsible for the notorious SolarWinds breach in 2021, an incident that was never fully explained. Microsoft’s continued security lapses are not just isolated incidents but part of a worrying trend. The company’s security culture has been criticized as inadequate, raising serious concerns about the safety of our communications and data.
Adding to this concern, another Bloomberg article disclosed that several Texas state agencies were compromised in the same hack. Agencies like the Texas Department of Transportation and the Texas Workforce Commission had their emails exposed. And while most of the details remain unclear, since emails were exposed, it suggests the breaches involved Office 365. The lack of transparency from Microsoft about whether the security failings were on their end or the customers’ side only adds to the frustration.
Microsoft’s repeated security issues should be a wake-up call. As we rely heavily on their services, the need for robust security measures and transparency is more critical than ever. If our emails and communications aren’t safe, what else is at risk? With the interconnectivity of Office 365 and Azure, particularly through services like Active Directory, everything on their platform is interconnected. This makes transparency on security breaches even more critical.
In other news, Amazon is building a series of high-security data centers for Australia’s defense and intelligence community in a $1.3 billion deal over the next decade. This follows a similar $5.3 billion deal with New Zealand in 2021. Given the strong alliances between these countries and the US, these deals likely aim to create a robust international intelligence-sharing network.





