In response to mounting pressure from US cybersecurity officials, Microsoft Corp. has announced that it will offer free cloud security logs to all its customers in the coming months. These security logs are crucial for identifying and preventing cybersecurity threats, as well as enabling swift action in the event of a breach. Until now, Microsoft had charged for certain types of logging as part of its premium service. However, the company's decision to provide this feature for free is a direct response to the growing frequency and sophistication of nation-state cyber threats.
Microsoft's move will allow customers to access detailed logs of email access and over 30 other types of log data, which were previously only available as part of the premium service. Although the logs themselves do not prevent attacks, they play a critical role in digital forensics and incident response. By providing this valuable information, Microsoft aims to enhance its customers' ability to effectively detect, investigate, and respond to cybersecurity incidents.
This decision comes on the heels of suspected cyber intrusions by Chinese hackers targeting cloud-based email systems at approximately 25 organizations worldwide, including several US agencies. Even high-profile officials like Commerce Secretary Gina Raimondo fell victim to the breach. The lack of comprehensive logging systems complicated the investigation into the SolarWinds attack, a major cyber incident that was disclosed in 2020. In this attack, Russian state-sponsored hackers infiltrated nine US federal agencies and around 100 companies by planting malicious code in software updates from SolarWinds Corp., among other methods.
By offering free cloud security logs, Microsoft hopes to strengthen cybersecurity defenses across its customer base and contribute to more effective incident response efforts. With access to these detailed logs, businesses and organizations will be better equipped to identify and mitigate cyber threats promptly, safeguarding their data and systems from potential breaches.