Sos Sosowski (@sos@mastodon.gamedev.place)
mastodon.gamedev.place
Attached: 1 image So, Microsoft is silently installing Copilot onto Windows Server 2022 systems and this is a disaster. How can you push a tool that siphons data to a third party onto a security-critical system? What privileges does it have upon install? Who thought this is a good idea? And most importantly, who needs this? #infosec #security #openai #microsoft #windowsserver #copilot

      • NuclearDolphin
        2·
        8 months ago

        I read their message as a joke that AD was an easy vector for an adversary

        • Monument@lemmy.sdf.orgEnglish
          2·
          8 months ago

          Yeah… I realized that like an hour later, and couldn’t figure out how to respond appropriately. Then I forgot all about it because ADHD.

          But yeah. I definitely got whooshed here.
          In my defense, I guess I wasn’t expecting to see a joke in the thread, so … well, I didn’t see one.

    • taladar@sh.itjust.works
      31·
      8 months ago

      Usually those are the ones all those companies and organizations are using who have their files encrypted by malware.

      • 4am@lemm.ee
        3·
        8 months ago

        Correlation != Causation.

        Now, on the other hand, the number of breaches has gone way up recently. Microsoft has pushed AD and Exchange into the cloud recently. And they just had several instances where keys were stolen and passwords were left in the clear for months after they were notified, as well…

        Well we have no solid evidence but it’s certainly within the realm of possibility.

      • lud@lemm.ee
        52·
        8 months ago

        Yes that’s because all companies pretty much use AD and exchange is also popular (but less so now with exchange online)

        Both are also extremely valuable for companies and thus attackers.

        Ransomware attacks pretty much always rely on missconfiguration and/or social engineering.