Microsoft takes pains to obscure role in 0-days that caused email breach

Microsoft’s new version of Clippy: ‘It looks like you’re trying to obscure a major security breach. Can I assist you with euphemisms?’

I would expect nothing less. But to be fair, I'd expect any large corporation to behave this way. Microsoft probably doesn't want to get sued by publicly admitting fault.

"Takes pains." And "obscures role" Is a strangely conspiratorial description for what sounds like a PR person copy-pasting a message from engineers describing the individual errors/events themselves - without throwing a specific engineer under the bus. Throwing blame around is a task for after you figure out what is wrong and how to properly fix it. Legal departments would also prevent a company self-describing as a zero-day exploit, because that's halfway to admitting legal liability.

It was also a chain of 3-5 smaller exploits, they probably don't even know yet who might be most at fault. All it takes is for a single junior engineer to make a mistake from inexperience, and for a distracted senior engineer reviewer to miss it. When there's something like over 100k engineers at Microsoft, this shit is to be expected.

Anything that is ever created by someone always has someone else trying to destroy it or use it for personal gain.

I don't think Microsoft are being deceitful here, and I don't think it's helpful to accuse them of a cover up while they're actively making the details public. I do agree making customers pay for their log files for this is pretty gross though. Expected but gross.