A 2013 Hack into Microsoft’s Internal Database was Left Unpublicized
Over 4-yrs back, hackers seemingly breached the internal database of Microsoft with which bugs are tracked. According to the company's few erstwhile employees, the breach came into notice during 2013; however, went unpublicized.
The matter is grave in what the hackers actually breached. The internal database mentioned has undisclosed security flaws of critical nature along with probable exploits inside the company's major software namely Windows all of which are yet to be rectified. Foreign governments and usual hackers got to know this so they were equipped with the ability towards infiltrating vulnerable systems. News agency Reuters notes that sophisticated PC hacks are so well executed that there are hardly any crashes because of them.
The Microsoft hackers as security researchers have named are called Wild Neutron, Butterfly and Morpho who in the past exploited security flaws inside Java so they could infiltrate Microsoft's networks and its employees' Apple devices. The team of 5 erstwhile employees described Microsoft's officials as becoming anxious when they became aware of the hack. Reportedly, there was poor protection of the internal database which could be hacked with just one password. Theinquirer.net posted this, October 17, 2017.
Furthermore, Microsoft re-examined the breaches against other organizations for verifying existence of loopholes in their products prior to the implementation of their patches. They determined that despite the bugs getting abused during the subsequent hacks, the info which the hackers accessed appeared elsewhere too. It was because of this that Microsoft didn't reveal the hacks' full extent, besides the reason that it had already fixed a number of the flaws.
As for the software giant its database with particulars about the yet-to-be-patched flaws apparently had weak protection with just about something extra of a password.
Contrary to Microsoft's handling, we get elaborate details about the hack from Mozilla which has urged its users for action. A likewise hack happened with Mozilla during 2015 when the criminals accessed a database containing description of ten critical vulnerabilities not patched. However, Mozilla revealed those descriptions to the public with the idea for better safeguarding its clients while updating everybody having a stake in the industry.
» SPAMfighter News - 23-10-2017
We are happy to see you are reading our IT Security News.
We do believe, that the foundation for a good work environment starts with fast, secure and high performing computers. If you agree, then you should take a look at our Business Solutions to Spam Filter & Antivirus for even the latest version of Exchange Servers - your colleagues will appreciate it!