← Back to the boardNews
Storm-0558 Update: Takeaways from Microsoft's recent report | Wiz Blog
Why it’s here: A detailed analysis of the Storm-0558 Microsoft signing-key compromise by a China-attributed actor, covering federal-relevant cybersecurity policy issues like supply-chain compromise, key management, and SDK security defaults that affect government cloud customers.
Trace across the boardItem
5d agoWiz ResearchStorm-0558 Update: Takeaways from Microsoft's recent report | Wiz BlogWiz Research analyzes Microsoft's September 2023 follow-up report on the Storm-0558 breach, drawing out takeaways on how the MSA signing key was likely stolen and what remains unanswered.1 outletCyber27 linked
Connected
22 links- NewsBingBang: How a simple developer mistake could have led to Bing.com takeover | Wiz BlogBoth involve Microsoft, Wiz, Outlook
- NewsNovember Patch Tuesday: An Overflowing Cornucopia of CVEsBoth involve Microsoft, Microsoft Exchange, Outlook
- NewsCompromised Microsoft Key: More Impactful Than We Thought | Wiz BlogBoth involve Microsoft, Wiz, Outlook
- NewsMicrosoft fixes over 1,000 vulnerabilities in November Patch TuesdayBoth involve Microsoft, Microsoft Exchange, Outlook
- NewsExploited Outlook Zero-Day Among 1,094 Flaws Patched by MicrosoftBoth involve Microsoft, Outlook
- NewsMicrosoft’s Patch Tuesday surpasses 1,000 bugs for second month in a rowBoth involve Microsoft, Outlook
- NewsGerman experts warn against digital dependence after Microsoft outageBoth involve Microsoft, Outlook, SharePoint
- NewsNovember 2026 Patch Tuesday: 63 Critical Microsoft fixes, plus an Outlook zero day that allows theft of hashed credentialsBoth involve Microsoft, Outlook
- NewsOutlook users warned about dangerous flaw that lets hackers hijack email accounts: Act nowBoth involve Microsoft, Outlook
- NewsMicrosoft says services fully restored after day-long global outageBoth involve Microsoft, Outlook
- NewsThe Microsoft Outage Is a Warning for the WorldBoth involve Microsoft, Outlook
- NewsThe SolarWinds Attack | Wiz BlogBoth involve Wiz, Azure AD SDK
- NewsMicrosoft 365 Crawls Back to Life After a 24-Hour OutageBoth involve Microsoft, Outlook
- NewsChaosDB: How we hacked thousands of Azure customers’ databases | Wiz BlogBoth involve Microsoft, Wiz
- NewsWiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL | Wiz BlogBoth involve Microsoft, Wiz
- NewsMicrosoft says it "restored service" after major worldwide outageBoth involve Microsoft, Outlook
- News“Secret” Agent Exposes Azure Customers To Unauthorized Code Execution | Wiz BlogBoth involve Microsoft, Wiz
- NewsCan Europe’s tech firms really replace Amazon, Google and Microsoft?Both involve Microsoft, Outlook
- NewsChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them | Wiz BlogBoth involve Microsoft, Wiz
- NewsBingBang: AAD misconfiguration led to Bing.com results manipulation and account takeover | Wiz BlogBoth involve Microsoft, Wiz
- NewsTowards a better cloud vulnerability response model | Wiz BlogBoth involve Microsoft, Wiz
- NewsHow we broke the cloud with two lines of code: the full story of ChaosDB | Wiz BlogBoth involve Microsoft, Wiz
About
- Microsoft
- China
- Wiz
- Microsoft Exchange
- Outlook
- SharePoint