Loading story…
U.S. Senator Ron Wyden has called on the FTC to investigate Microsoft for alleged gross cybersecurity negligence following the 2024 ransomware attack on Ascension, which exposed 5.6 million patient records. Wyden's letter cites Microsoft's insecure default settings, continued support for the outdated RC4 encryption algorithm, and inadequate password policies as key enablers of the breach. He argues that Microsoft's market dominance and slow response to known vulnerabilities pose a systemic national security risk.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
5 references tracked. Mallory keeps watching after this page renders.
go.theregister.com
Open sourcethecyberexpress.com
Open sourcehackread.com
Open sourcebleepingcomputer.com
Open sourcethehackernews.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Sen. Ron Wyden has urged the FTC to investigate Microsoft, alleging that security lapses in its products contributed to the 2024 ransomware attack on Ascension Health. The attack exploited weaknesses in Microsoft's Active Directory, specifically the Kerberoasting technique, leading to the compromise of 5.6 million individuals' data. Wyden's letter highlights longstanding concerns about Microsoft's default security settings and calls for regulatory intervention to address systemic risks to critical infrastructure.
Jun 29, 2026Senator Ron Wyden has called on the FTC to investigate Microsoft for still using the outdated RC4 encryption algorithm. The concern centers on the Kerberoasting attack, which exploits weaknesses in the Kerberos authentication system. The use of RC4 is seen as a significant security risk in modern environments.
Jun 29, 2026
Sen. Ron Wyden called on the National Security Agency to update federal cybersecurity guidance for virtual private networks (VPNs), highlighting the continued importance of securing remote-access infrastructure used to reach protected government and enterprise networks. The existing NSA and CISA guidance, *Selecting and Hardening Remote Access VPN Solutions*, warns that nation-state actors can exploit VPN vulnerabilities for credential theft, remote code execution, session hijacking, cryptographic weakening, and disclosure of sensitive device data. It recommends using validated VPN products, enforcing strong multi-factor authentication, promptly applying patches, and disabling unnecessary non-VPN features to reduce attack surface.
Sep 3, 2026