The US Cyber Safety Review Board (CSRB) is to conduce a review of cloud cyber security, focusing on what government bodies, industry and cloud service providers need to do better to strengthen identity management and authentication in the cloud.
The probe comes in the wake of the July 2023 Microsoft Exchange Online incident, which will form a key line of inquiry.
The incident saw Chinese cyber spies access email data cross multiple organisations, including government agencies, using forged authentication tokens via a stolen Microsoft account consumer signing key. “Organisations of all kinds are increasingly reliant on cloud computing to deliver services … which makes it imperative that we understand the vulnerabilities of that technology,” said Homeland Security secretary Alejandro Mayorkas.
