Google slams Microsoft security failures, offers software discounts in bid to poach customers

An angled close up of the Google sign logo at a Google office
(Image credit: Shutterstock/Jay Fog)

As the US Cyber Safety Review Board (CSRB) and the Cybersecurity and Infrastructure Security Agency (CISA) are whipping Microsoft for poor cybersecurity practices, Google is rummaging through its belongings for any valuable customers it might snag.

Earlier this week, the search engine giant published a new whitepaper titled “A more secure alternative”, in which it heavily criticized Microsoft’s recent security lapses that resulted, among other things, in sensitive information being stolen from government agents’ email accounts.

In June 2023, the US State Department identified suspicious activity in its Microsoft 365 accounts, with the software giant later determining that the Chinese state-sponsored threat actor known as Storm-0558 accessed and exfiltrated unclassified Exchange Online Outlook data.

New promotion

The entire incident turned into quite the fiasco, as the hackers used a previously acquired MSA key to forge tokens to access OWA and Outlook.com. How they obtained the MSA key remains a mystery. As a result, both CISA and CSRB published reports, slamming how Microsoft handled the incident.

Now, Google took a swing at the Redmond giant, essentially saying that its Workspace offering (its productivity suite that includes Gmail, Google Drive, and other tools) is a better, safer alternative to what Microsoft is offering. Not only that, but also used the opportunity to offer a new promotion in which agencies with at least 500 workers get the Workspace Enterprise Plus plan with a discount, and an extra year for free, should they sign up for at least three years.

While all this is happening, Microsoft isn’t exactly sitting with its hands crossed. It kickstarted the Secure Future Initiative, whose goal it is to address the US government criticism, restore any ruined trust among its customers, and obviously - improve its cybersecurity posture. 

"Our Secure Future Initiative (SFI) brings together every part of Microsoft to advance cybersecurity protection across our platforms and products, benefiting customers around the world, including commercial and government enterprises, small businesses and individuals," a Redmond spokesperson told The Register.

"In addition to the SFI milestones we recently announced, Microsoft continues working closely with stakeholders across the cybersecurity community, including signing CISA's Secure by Design pledge and sharing threat intelligence with the security community on sophisticated nation state and cybercrime actors."

TechRadar Pro contacted Microsoft for comment, but did not immediately receive a response.

More from TechRadar Pro

TOPICS

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
Image of someone clicking a cloud icon.
Microsoft's new expanded logging capabilities could mean big changes for US government devices
Shadowed hands on a digital background reaching for a login prompt.
A flaw in Google OAuth system is exposing millions of users via abandoned accounts
Flag of the People's Republic of China overlaid with a technological network of wires and circuits.
One of the biggest flaws exploited by Salt Typhoon hackers has had a patch available for years
Microsoft
Microsoft hits back against UK competition lawsuits, slams AWS and Google once again
Fraude en ligne phishing
Google forced to step up phishing defenses following ‘most sophisticated attack’ it has ever seen
Hack The Box crisis simulation event
“Everyone will experience a hack” - how incident response can protect your organization
Latest in Security
cybersecurity
Chinese government hackers allegedly spent years undetected in foreign phone networks
Data leak
A major Keenetic router data leak could put a million households at risk
Code Skull
Interpol operation arrests 300 suspects linked to African cybercrime rings
Insecure network with several red platforms connected through glowing data lines and a black hat hacker symbol
Multiple routers hit by new critical severity remote command injection vulnerability, with no fix in sight
Code Skull
This dangerous new ransomware is hitting Windows, ARM, ESXi systems
An abstract image of a lock against a digital background, denoting cybersecurity.
Critical security flaw in Next.js could spell big trouble for JavaScript users
Latest in News
DeepSeek
Deepseek’s new AI is smarter, faster, cheaper, and a real rival to OpenAI's models
Open AI
OpenAI unveiled image generation for 4o – here's everything you need to know about the ChatGPT upgrade
Apple WWDC 2025 announced
Apple just announced WWDC 2025 starts on June 9, and we'll all be watching the opening event
Hornet swings their weapon in mid air
Hollow Knight: Silksong gets new Steam metadata changes, convincing everyone and their mother that the game is finally releasing this year
OpenAI logo
OpenAI just launched a free ChatGPT bible that will help you master the AI chatbot and Sora
An aerial view of an Instavolt Superhub for charging electric vehicles
Forget gas stations – EV charging Superhubs are using solar power to solve the most annoying thing about electric motoring