{"id":438434,"date":"2022-03-23T07:18:38","date_gmt":"2022-03-23T05:18:38","guid":{"rendered":"https:\/\/mybroadband.co.za\/news\/?p=438434"},"modified":"2022-03-23T08:04:01","modified_gmt":"2022-03-23T06:04:01","slug":"microsoft-hacked-bing-and-cortana-source-code-stolen","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/security\/438434-microsoft-hacked-bing-and-cortana-source-code-stolen.html","title":{"rendered":"Microsoft hacked \u2014 Bing and Cortana source code stolen"},"content":{"rendered":"<p>Microsoft Corp. said that the hacker group Lapsus$ gained \u201climited access\u201d to its systems, following a claim by the group that it obtained source code for the Bing search engine and Cortana voice assistant.<\/p>\n<p>The software giant had been tracking the activities of Lapsus$ \u2014 which it labels a \u201clarge-scale social engineering and extortion campaign\u201d \u2014 for several weeks and provided some details on the methods of its attacks in a <strong><a href=\"https:\/\/www.microsoft.com\/security\/blog\/2022\/03\/22\/dev-0537-criminal-actor-targeting-organizations-for-data-exfiltration-and-destruction\/\" target=\"_blank\" rel=\"noopener noreferrer\">blog post<\/a><\/strong>\u00a0late Tuesday.<\/p>\n<p>Lapsus$ had previously breached the cybersecurity defenses of Nvidia Corp. and Samsung Electronics Co., and this week also claimed to have gained access to the system privileges of Okta, the San Francisco-based company that manages user authentication services for thousands of corporate clients.<\/p>\n<p>\u201cOur investigation has found a single account had been compromised, granting limited access,\u201d Microsoft said. \u201cOur cybersecurity response teams quickly engaged to remediate the compromised account and prevent further activity.<\/p>\n<p>Microsoft does not rely on the secrecy of code as a security measure and viewing source code does not lead to elevation of risk.\u201d<\/p>\n<p>The hacking group, which has been given the designation DEV-0537 by Microsoft\u2019s cybersecurity researchers, has been expanding the geographic range of its targets and going after government organizations as well as the tech, telecom and health-care sectors, according to the blog post.<\/p>\n<p>They are also known for hijacking cryptocurrency accounts, Microsoft said.<\/p>\n<p>Lapsus$ has made claims on social media that it\u2019s infiltrated several large tech companies besides Microsoft. Its Telegram channel was first to announce the Microsoft and Okta breaches this week and also included mention of breaching employee accounts of LG Electronics Inc.<\/p>\n<p>\u201cUnlike most activity groups that stay under the radar, DEV-0537 doesn\u2019t seem to cover its tracks,\u201d said Microsoft, based in Redmond, Washington. \u201cThey go as far as announcing their attacks on social media or advertising their intent to buy credentials from employees of target organizations.\u201d<\/p>\n<h3 class=\"my-4\">Now read: <a href=\"https:\/\/mybroadband.co.za\/news\/security\/438300-threats-to-leak-ramaphosa-malema-personal-banking-details.html\" rel=\"bookmark\">Threats to leak Ramaphosa\u2019s and Malema\u2019s personal banking details<\/a><\/h3>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft said that the hacker group Lapsus$ gained &#8220;limited access&#8221; to its systems, following a claim by the group that it obtained source code for the Bing search engine and Cortana voice assistant.<\/p>\n","protected":false},"author":341034,"featured_media":438438,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[27],"tags":[1938,24388,199,461,77072,123],"class_list":["post-438434","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-bing","tag-cortana","tag-hackers","tag-hacking","tag-lapsus","tag-microsoft"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/438434"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/341034"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=438434"}],"version-history":[{"count":0,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/438434\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/438438"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=438434"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=438434"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=438434"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}