The Comedy of Errors That Let China-Backed Hackers Steal Microsoft’s Signing Key
www.wired.com
After leaving many questions unanswered, a new post mortem from Microsoft explains the series of slip-ups that allowed attackers to steal and abuse a valuable cryptographic key.
  • V ‎ ‎ @beehaw.orgEnglish
    1·
    1 year ago

    It essentially sat unnoticed for a long time too. I can’t imagine anyone of expertise considered Azure to be the best option for security, but holy hell this is embarrassing.