Not a question - Just making sure everyone knows.

Question

Post reply

Not a question - Just making sure everyone knows.

Jeff Moden

SSC Guru

Points: 1003873
More actions
July 22, 2023 at 5:12 pm

#4241880

I'm posting this because I just want to make sure that people are aware. I don't believe a "panic" is required but I do believe that "awareness" is required. We all "knew" the following would "never happen", right?
https://www.securityweek.com/microsoft-cloud-hack-exposed-more-than-exchange-outlook-emails/amp/
https://www.bleepingcomputer.com/news/security/stolen-azure-ad-key-offered-widespread-access-to-microsoft-cloud-services/
You might also want to check on the "Related" links near the bottom of each article. It's not like this is the first incident but I don't hear many people talking about such things. Has it become so common that "we" now just shrug and accept?

--Jeff Moden
RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
Change is inevitable... Change for the better is not.
Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)
August 24, 2023 at 9:45 am

This was removed by the editor as SPAM

Viewing 10 posts - 1 through 9 (of 9 total)

You must be logged in to reply to this topic. Login to reply

Site Owners SSC Guru Points: 80320 More actions · Answer 1

Thanks for posting your issue and hopefully someone will answer soon.

This is an automated bump to increase visibility of your question.

Johan Bijnens SSC Guru Points: 135265 More actions · Answer 2

Isn't that supposed to never ever happen ?

#Sarcasm

Johan

Learn to play, play to learn !

Dont drive faster than your guardian angel can fly ...
but keeping both feet on the ground wont get you anywhere :w00t:

- How to post Performance Problems
- How to post data/code to get the best help[/url]

- How to prevent a sore throat after hours of presenting ppt

press F1 for solution, press shift+F1 for urgent solution 😀

Need a bit of Powershell? How about this

Who am I ? Sometimes this is me but most of the time this is me

Grant Fritchey SSC Guru Points: 398708 More actions · Answer 3

Nothing, anywhere, is perfectly secure. There are always vulnerabilities. We just don't always know what they are until it's far too late.

However, I still land where I always land on this. Mostly, Microsoft is going to do a better job than most organizations at securing stuff, most of the time. NOTE: not all, not all the time, not everywhere. Certainly, there are some orgs that are going to be better... or, they're just small enough that they haven't had the full focus of serious hackers just yet.

Regardless, you kind of have to assume, at some point, you may be hacked. Backups, offline storage, other stuff along these lines will always be prudent. Cloud or not. Microsoft or not.

"The credit belongs to the man who is actually in the arena, whose face is marred by dust and sweat and blood"
- Theodore Roosevelt

Author of:
SQL Server Execution Plans
SQL Server Query Performance Tuning

Jeff Moden SSC Guru Points: 1003873 More actions · Answer 4

Grant Fritchey wrote:

Nothing, anywhere, is perfectly secure. There are always vulnerabilities. We just don't always know what they are until it's far too late.
However, I still land where I always land on this. Mostly, Microsoft is going to do a better job than most organizations at securing stuff, most of the time. NOTE: not all, not all the time, not everywhere. Certainly, there are some orgs that are going to be better... or, they're just small enough that they haven't had the full focus of serious hackers just yet.
Regardless, you kind of have to assume, at some point, you may be hacked. Backups, offline storage, other stuff along these lines will always be prudent. Cloud or not. Microsoft or not.

That, good Sir, is my whole point. Too many people (from what I've seen on many of the forums) think that the cloud is some form of magic when it comes to security. It can certainly be better than not having someone that knows security locally but the cloud isn't total magic. You have to protect against the eventual penetration that will occur.

--Jeff Moden

RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

Change is inevitable... Change for the better is not.

Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

Grant Fritchey SSC Guru Points: 398708 More actions · Answer 5

You're not paranoid when they're out to get you. And they're out to get us.

"The credit belongs to the man who is actually in the arena, whose face is marred by dust and sweat and blood"
- Theodore Roosevelt

Author of:
SQL Server Execution Plans
SQL Server Query Performance Tuning

CreateIndexNonclustered SSChasing Mays Points: 648 More actions · Answer 6

If you have done your due diligence, you have to shrug it off. Very few organizations do as a whole and many IT Professionals do not do it personally.

Being aware of these things/healthily paranoid and being aware of the buzzwords and promises of any solution not being panacea but tools in an arsenal, is critical.

The cloud is no magic, what the cloud is, is that some of the unacceptable user and management requests that would normally be forced through, contrary to basic security practices. Things like holding back patches for months because of...'reasons.' Or installing google chrome on servers. Or giving a self-aggrandizing manager domain admin rights. These things could magically happen on prem too, if an organization has the fortitude to enforce them.

I really like this video from Defcon 19 that is kind of adjacent to this topic: https://youtu.be/XIfrfWgJlsI

Johan Bijnens SSC Guru Points: 135265 More actions · Answer 7

The question is not "If they'll target you",

the question is "When will they target you"

#KeepDoorShut

#KeepSecurityTight