Zero Trust

Inside Microsoft’s Cybersecurity Failures

Investigating how the world’s largest software provider handles the security of its own ubiquitous products.

Impact of Our Reporting

Pentagon Bans Tech Vendors From Using China-Based Personnel After ProPublica Investigation

by Renee Dudley

September 19, 2025, 5:00 am EDT

Pentagon Warns Microsoft: Company’s Use of China-Based Engineers Was a “Breach of Trust”

by Renee Dudley

August 29, 2025, 4:10 pm EDT

Microsoft Says It Has Stopped Using China-Based Engineers to Support Defense Department Computer Systems

by Renee Dudley

July 18, 2025, 5:35 pm EDT

Microsoft Bundling Practices Focus of Federal Antitrust Probe

by Renee Dudley

December 26, 2024, 5:00 am EST

Microsoft President Grilled by Congress Over Cybersecurity Failures

by Renee Dudley

June 13, 2024, 7:45 pm EDT

15 stories published since 2024

Microsoft Failed to Disclose Key Details About Use of China-Based Engineers in U.S. Defense Work, Record Shows

by Renee Dudley, with research by Doris Burke

August 20, 2025, 5:00 am EDT
Microsoft Used China-Based Engineers to Support Product Recently Hacked by China

by Renee Dudley

August 1, 2025, 3:15 pm EDT
Microsoft Used China-Based Support for Multiple U.S. Agencies, Potentially Exposing Sensitive Data

by Renee Dudley, with research by Doris Burke

July 25, 2025, 12:05 pm EDT
Microsoft’s “Digital Escort” Program Could Leave Sensitive Government Info Vulnerable to Espionage. Here’s What to Know.

by ProPublica

July 15, 2025, 5:30 pm EDT
A Little-Known Microsoft Program Could Expose the Defense Department to Chinese Hackers

by Renee Dudley, with research by Doris Burke

July 15, 2025, 5:00 am EDT
Following a Series of Government Hacks, Biden Closes Out His Administration With New Cybersecurity Order

by Renee Dudley

January 17, 2025, 4:25 pm EST
Microsoft’s “Free” Plan to Upgrade Government Cybersecurity Was Designed to Box Out Competitors and Drive Profits, Insiders Say

by Renee Dudley, with research by Doris Burke

November 15, 2024, 6:00 am EST
The President Ordered a Board to Probe a Massive Russian Cyberattack. It Never Did.

by Craig Silverman

July 8, 2024, 5:00 am EDT
Nine Takeaways From Our Investigation Into Microsoft’s Cybersecurity Failures

by ProPublica

June 18, 2024, 5:00 am EDT
Microsoft Chose Profit Over Security and Left U.S. Government Vulnerable to Russian Hack, Whistleblower Says

by Renee Dudley, with research by Doris Burke

June 13, 2024, 5:00 am EDT