After enduring a decade of high-profile breaches, Microsoft has significantly revised its cybersecurity strategy, and leadership reports that these changes are already yielding positive outcomes. The company had frequently faced criticism for its security lapses, with many in the tech industry arguing that its scale should have allowed it to prevent such incidents. Notable attacks included the 2022 intrusion by the teenage group LAPSUS$, followed in 2023 by separate hacks attributed to Russian and Chinese operatives. These incidents involved data theft from the State Department and other clients, prompting a federal review board to condemn Microsoft’s security practices as inadequate following the Chinese breach.
