Microsoft says hackers viewed its source code

Microsoft said Thursday that the suspected Russian hackers behind a massive US government security breach also viewed some of the company's source code....

Posted: Jan 2, 2021 10:37 AM

Microsoft said Thursday that the suspected Russian hackers behind a massive US government security breach also viewed some of the company's source code.

The unauthorized access does not appear to have compromised any Microsoft services or customer data, the company said in a blog post. But an investigation showed that the attackers took advantage of their access to Microsoft's systems to view company code.

"We detected unusual activity with a small number of internal accounts and upon review, we discovered one account had been used to view source code in a number of source code repositories," Microsoft said. "The account did not have permissions to modify any code or engineering systems and our investigation further confirmed no changes were made. These accounts were investigated and remediated."

The disclosure highlights the broad reach of the attackers, whom investigators have described as extremely sophisticated and well-resourced. And it suggests that corporate espionage may have been as much a motive as a hunt for government secrets.

Source code represents the basic building blocks of computer programs. They are the instructions written by programmers that make up an application or computer program.

Microsoft had previously acknowledged using the IT management software, SolarWinds Orion, that gave the attackers a potential window into thousands of public and private sector organizations. But this marks the first time Microsoft has confirmed that the attackers exploited the vulnerability against the technology giant.

Mike Chapple, a former National Security Agency official and an information technology professor at the University of Notre Dame, said the attackers were likely looking for potential security vulnerabilities in Microsoft products that they could exploit to gain access to users of those products.

"Cybersecurity professionals now need to be concerned that this information falling into the wrong hands might create the next SolarWinds-level vulnerability in a Microsoft product," Chapple said.

But Microsoft said its security practices begin by preemptively assuming that hackers already have access to the company's source code, and protects its services accordingly.

"We do not rely on the secrecy of source code for the security of products, and our threat models assume that attackers have knowledge of source code," the company said. "So viewing source code isn't tied to elevation of risk."

New York Coronavirus Cases

County data is updated nightly.

Cases: 2110004

Reported Deaths: 53574
CountyCasesDeaths
Kings28059410456
Queens2773009958
Suffolk2010363400
Nassau1836493175
Bronx1835056589
New York1382724500
Westchester1296642291
Erie895791807
Richmond749771841
Monroe689761110
Orange48312843
Rockland46944963
Onondaga38931677
Dutchess29472445
Albany24699356
Oneida22619514
Niagara20035373
Broome18623366
Saratoga15364168
Ulster13908257
Schenectady13202205
Rensselaer11229142
Putnam1060692
Chautauqua8951145
Chemung7761136
Oswego762292
Ontario740693
Steuben6952145
Sullivan667376
St. Lawrence664096
Cayuga633792
Jefferson613668
Wayne578370
Cattaraugus572091
Genesee5435124
Herkimer5187109
Clinton483533
Madison456289
Livingston452060
Fulton442291
Tompkins434652
Montgomery4254126
Columbia4064104
Cortland392662
Tioga383063
Warren365857
Wyoming358253
Allegany355587
Chenango349976
Otsego346247
Greene340379
Washington316255
Orleans311883
Lewis280836
Franklin256312
Delaware238138
Seneca201156
Schoharie169217
Essex159326
Yates117826
Schuyler107514
Hamilton3132
Unassigned9315
Out of NY0250
Utica
Clear
47° wxIcon
Hi: 64° Lo: 45°
Feels Like: 47°
Oneonta
Clear
49° wxIcon
Hi: 64° Lo: 43°
Feels Like: 47°
Herkimer
Clear
47° wxIcon
Hi: 67° Lo: 47°
Feels Like: 47°
Old Forge
Partly Cloudy
47° wxIcon
Hi: 62° Lo: 44°
Feels Like: 47°
WKTV Radar
WKTV Temperatures
WKTV Severe Weather
Senior Send-Off brought to you by Herkimer College
18 Facets of Summer Photo Contest brought to you by Herkimer Diamond Mines
Looking for work or looking to hire? Check out the WKTV Job Fair!
Alivana Ready for Summer Giveaway
Saluting Those Who Are Proud 2 Serve