Microsoft says hackers viewed its source code

Microsoft said Thursday that the suspected Russian hackers behind a massive US government security breach also viewed some of the company's source code....

Posted: Dec 31, 2020 1:04 PM

Microsoft said Thursday that the suspected Russian hackers behind a massive US government security breach also viewed some of the company's source code.

The unauthorized access does not appear to have compromised any Microsoft services or customer data, the company said in a blog post. But an investigation showed that the attackers took advantage of their access to Microsoft's systems to view company code.

"We detected unusual activity with a small number of internal accounts and upon review, we discovered one account had been used to view source code in a number of source code repositories," Microsoft said. "The account did not have permissions to modify any code or engineering systems and our investigation further confirmed no changes were made. These accounts were investigated and remediated."

The disclosure highlights the broad reach of the attackers, whom investigators have described as extremely sophisticated and well-resourced. And it suggests that corporate espionage may have been as much a motive as a hunt for government secrets.

Source code represents the basic building blocks of computer programs. They are the instructions written by programmers that make up an application or computer program.

Microsoft had previously acknowledged using the IT management software, SolarWinds Orion, that gave the attackers a potential window into thousands of public and private sector organizations. But this marks the first time Microsoft has confirmed that the attackers exploited the vulnerability against the technology giant.

Mike Chapple, a former National Security Agency official and an information technology professor at the University of Notre Dame, said the attackers were likely looking for potential security vulnerabilities in Microsoft products that they could exploit to gain access to users of those products.

"Cybersecurity professionals now need to be concerned that this information falling into the wrong hands might create the next SolarWinds-level vulnerability in a Microsoft product," Chapple said.

But Microsoft said its security practices begin by preemptively assuming that hackers already have access to the company's source code, and protects its services accordingly.

"We do not rely on the secrecy of source code for the security of products, and our threat models assume that attackers have knowledge of source code," the company said. "So viewing source code isn't tied to elevation of risk."

Oregon Coronavirus Cases

Data is updated nightly.

Cases: 155597

Reported Deaths: 2208
CountyCasesDeaths
Multnomah31877528
Washington21211212
Marion18468285
Clackamas13380175
Lane10258126
Jackson8395112
Umatilla765982
Deschutes595259
Yamhill378364
Linn359056
Malheur335158
Polk306442
Klamath279155
Douglas247454
Benton234416
Josephine234050
Jefferson195828
Coos149119
Union128419
Columbia126521
Wasco122126
Lincoln113220
Hood River106929
Morrow104914
Clatsop7756
Crook77518
Baker6567
Curry4296
Tillamook4142
Lake3766
Harney2736
Grant2231
Wallowa1424
Gilliam531
Sherman530
Wheeler221
Unassigned00

California Coronavirus Cases

Data is updated nightly.

Cases: 3566914

Reported Deaths: 52158
CountyCasesDeaths
Los Angeles119192321435
Riverside2894503767
San Bernardino2866072874
Orange2612203917
San Diego2600913284
Santa Clara1106211777
Kern102627827
Fresno953931443
Sacramento932811472
Alameda806681242
Ventura77623844
San Joaquin665691101
Contra Costa62248681
Stanislaus56132946
Tulare47784758
Monterey42138328
San Mateo38998515
San Francisco34260412
Santa Barbara31805411
Solano30024164
Merced28915397
Sonoma28141298
Imperial26903591
Kings21955218
Placer19763232
San Luis Obispo19612227
Madera15467209
Santa Cruz14588183
Marin13136197
Yolo12834185
Shasta10985174
Butte10962160
El Dorado9095100
Napa903869
Sutter884597
San Benito576759
Yuba573337
Lassen560119
Tehama508152
Nevada396074
Tuolumne394659
Mendocino379643
Amador346341
Humboldt318033
Lake315641
Glenn222523
Colusa212813
Calaveras190547
Siskiyou174014
Inyo128737
Mono12114
Del Norte9875
Plumas6536
Modoc4524
Mariposa3957
Trinity3675
Sierra990
Alpine810
Unassigned00
Medford
Clear
47° wxIcon
Hi: 63° Lo: 30°
Feels Like: 47°
Brookings
Clear
43° wxIcon
Hi: 57° Lo: 37°
Feels Like: 43°
Medford
Clear
47° wxIcon
Hi: 39° Lo: 18°
Feels Like: 47°
Medford
Clear
47° wxIcon
Hi: 65° Lo: 30°
Feels Like: 47°
Klamath Falls
Clear
30° wxIcon
Hi: 50° Lo: 23°
Feels Like: 25°
Very mild start to March
KDRV Radar
KDRV Fire Danger
KDRV Weather Cam

Community Events