Google believes the public sector can do a better job than Microsoft in fixing ‘security holes’

Google is taking advantage of Microsoft's enterprise security loopholes to pitch its services to government agencies. Based on a recent report from the US Cyber ​​Security Review Board (CSRB) that attributed Microsoft's security vulnerability to the company's "little attention" to corporate security, Google stated they can assist .

This is not a direct attack like Microsoft CEO Satya Nadella once declared "making Google dance to its music", but still competitive. In Monday's blog post, Google repeatedly referred to Microsoft as a "vendor" and said that the CSRB report "indicates a lack of a strong commitment to security that leads to preventable errors and breaches." serious offence". Google emphasizes "responsible" platforms maintaining strong security measures.

Google recommends that government agencies use "systems and products that are designed securely from the ground up" (using new principles they recently committed to) and public sector organizations Regularly re-check the security certification of their technology products and services. Google further emphasized that governments should avoid "using the same vendor for operating systems, email, office software and security tools". Microsoft, of course, offers all of this and more to its large base of business customers.

Microsoft is still dealing with a security breach from Midnight Blizzard, a group of Russian hackers who penetrated the company's internal communications system and stole the company's source code. This incident and other vulnerabilities reported by the CSRB in April were considered evidence that Microsoft was "paying little attention" to enterprise security.

Microsoft is concerned and trying to regain trust. It's unclear what they will do to achieve that goal, but CEO Nadella has urged employees to "do security" whenever they have to make a choice between security and other priorities, This seems like a good start.