Google criticizes Microsoft for poor security reputation

Google has recently published a white paper titled “A Safer Alternative” urging companies to switch from Microsoft’s Exchange and OneDrive to Gmail and Google Drive due to security concerns. The paper is based on the findings of the US government’s Cyber Security Review Board (CSRB), which criticized Microsoft’s handling of the June 2023 attack on Exchange Online.

The CSRB report highlighted Microsoft’s lack of knowledge about how attackers obtained a security key to breach the Exchange Online service. Google also referenced the Cybersecurity and Infrastructure Security Agency (CISA) report on a separate attack known as Midnight Blizzard.

Google did not hesitate to emphasize Microsoft’s security vulnerabilities, including their inaccurate public statements and security priorities. The white paper also highlighted Google’s own cybersecurity practices as an example of what Microsoft should have done.

In an effort to showcase the superiority of Google Workspace over Microsoft’s ecosystem, Google discussed key differences between the two platforms. Google emphasized how they rotate keys and shorten their validity period, contrasting it with Microsoft’s approach.

The white paper also mentioned a past breach that Google experienced in 2009 as part of Operation Aurora, where Google used the incident to improve its security measures. Alongside the white paper, Google also published blog posts promoting their superior security measures.

To attract Microsoft’s customers, Google announced a promotion offering discounts on their Workspace Enterprise Plus plan for agencies with at least 500 employees. Google aims to capture a larger share of the market previously dominated by Microsoft.

However, while Google promotes its enhanced security measures, there are concerns that boasting about security could make them a more enticing target for cyberattacks. Microsoft responded by highlighting their efforts to enhance cybersecurity through their Secure Future Initiative (SFI) and collaboration with stakeholders in the cybersecurity community.

In conclusion, Google’s push for companies to switch from Microsoft to Google Workspace is motivated by security concerns and a desire to showcase their superior cybersecurity practices. However, the competition between the two tech giants continues as they strive to provide the most secure solutions for their customers.

Article Source
https://www.theregister.com/2024/05/20/google_takes_shots_at_microsoft/