"Microsoft’s security culture was inadequate and requires an overhaul" says Cyber Safety Review Board following a "cascade of security failures"

Microsoft logo on a Surface device.

What you need to know

• A report by the U.S. Cyber Safety Review Board states that Microsoft could have prevented the Chinese state-sponsored hacking group Storm-0558 from accessing the email accounts of U.S. government employees.
• The board was commissioned by President Biden and established by the U.S Department of Homeland Security in 2023.
• The report explained that "Storm-0558 was able to succeed because of a cascade of security failures at Microsoft."