Security News > 2024 > April > Microsoft and Security Incentives
Grotto told us Microsoft had to be "Dragged kicking and screaming" to provide logging capabilities to the government by default, and given the fact the mega-corp banked around $20 billion in revenue from security services last year, the concession was minimal at best.
"The government needs to focus on encouraging and catalyzing competition," Grotto said.
He believes it also needs to publicly scrutinize Microsoft and make sure everyone knows when it messes up.
"At the end of the day, Microsoft, any company, is going to respond most directly to market incentives," Grotto told us.
"Unless this scrutiny generates changed behavior among its customers who might want to look elsewhere, then the incentives for Microsoft to change are not going to be as strong as they should be."
Breaking up the tech monopolies is one of the best things we can do for cybersecurity.
News URL
https://www.schneier.com/blog/archives/2024/04/microsoft-and-security-incentives.html
Related news
- Microsoft overhauls security for publishing Edge extensions (source)
- Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the Wild (source)
- Week in review: Microsoft fixes two exploited zero-days, SOC teams are losing trust in security tools (source)
- Microsoft warns it lost some customer's security logs for a month (source)
- Microsoft lost some customers’ cloud security logs (source)
- Microsoft Entra "security defaults" to make MFA setup mandatory (source)
- Microsoft pulls Exchange security updates over mail delivery issues (source)
- ScubaGear: Open-source tool to assess Microsoft 365 configurations for security gaps (source)
- Microsoft Ignite 2024 Unveils Groundbreaking AI, Security, and Teams Innovations (source)
- Microsoft plans to boot security vendors out of the Windows kernel (source)