overview

Advanced

(SolarWinds hack) - '..the Solorigate incident is an opportunity to work together in important ways, to share information, strengthen defenses and respond to attacks..'

Posted by archive 
'As we said in our recent blog, we believe the Solorigate incident is an opportunity to work together in important ways, to share information, strengthen defenses and respond to attacks. Like other SolarWinds customers, we have been actively looking for indicators of the Solorigate actor and want to share an update from our ongoing internal investigation.'

..

At Microsoft, we have an inner source approach – the use of open source software development best practices and an open source-like culture – to making source code viewable within Microsoft. This means we do not rely on the secrecy of source code for the security of products, and our threat models assume that attackers have knowledge of source code. So viewing source code isn’t tied to elevation of risk.'

- Microsoft Internal Solorigate Investigation Update, December 31, 2020



Context

(SolarWinds hack) - 'Put simply, we need a more effective national and global strategy to protect against cyberattacks.'