tech industry

U.S. Senator Ron Wyden has called for an investigation by the FTC into Microsoft’s cybersecurity practices, citing concerns over the distribution of "dangerous, insecure software" that has allegedly facilitated cybercriminal activities, particularly impacting the Ascension hospital network. A ransomware attack on Ascension, which operates over 140 hospitals, was triggered by a contractor clicking a malicious link, exploiting vulnerabilities in Microsoft’s software. The breach resulted in disruptions to surgical procedures and the theft of personal and medical information from approximately 5.6 million patients. Wyden highlighted a vulnerability known as "Kerberoasting" and criticized Microsoft for using the outdated RC4 encryption algorithm, which has not been replaced despite the availability of more secure options. He noted that Microsoft has been aware of these issues for a long time but has not taken adequate action, including failing to implement a promised patch to disable RC4. Wyden accused Microsoft of prioritizing profit over security and emphasized the need for regulatory action to ensure the company implements secure defaults and provides clear security guidance to customers.