Microsoft push on security

This is quite good from Microsoft - what was needed after the CISA report. Especially the ‘six prioritized security pillars’. Nadella put out a pretty good memo as well.

Read Satya Nadella’s Microsoft memo on putting security first

Nadella doesn’t want Microsoft employees making security tradeoffs.

The Verge

The pillars are good (and every business should bear those in mind). The buy-in has come from the very top and it’s linked to compensation for senior leaders so they mean it (ever tried to get infosec/security in place when the Exec went ‘Meh’?).

Won’t be a quick fix, but good to see. How successful it’ll be will possibly depend on the ratio between technical debt and culture.

Why not before now? Maybe too distracted with what others were doing back in 2019

Microsoft’s FOMO on Google AI drove funding of OpenAI

Historical email in antitrust case shows execs ‘very, very worried’ about capability gaps

The RegisterRichard Speed

Time will tell

Microsoft overhaul treats security as “top priority” after a series of failures

Microsoft outlines its security overhaul.

The Verge