Microsoft has made public how the hackers known as Lapsus$ gained access to its networks.
Over the weekend, the hackers shared and erased screenshots on Telegram indicating they had access to Cortana and Bing code.
Microsoft stated in a blog post explaining its investigation of Lapsus$’ strategies that it was able to stop the attackers.
“When the perpetrator publicly publicised their infiltration, our team was already investigating the compromised account based on threat information.” “According to the post.
“This public disclosure intensified our activity, allowing our team to intervene and stop the actor in the middle of his operation, minimising the larger damage.””
According to Microsoft, the hack did not result in widespread compromise.
“During our inquiry, we discovered that a single account had been hacked, providing restricted access.”
“Our cyber security response teams jumped into action right away to fix the compromised account and prevent additional behaviour.”
Similar to its prior responses to code breaches, Microsoft stressed that having code examined by outsiders is no longer the disaster it once was.
“Microsoft does not rely on code secrecy as a security mechanism, and examining source code does not result in an increase in risk,” the post said.