Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
In July 2023, Senator Ron Wyden accused Microsoft of cybersecurity negligence in connection with the Storm-0558 cyberespionage campaign and asked federal agencies to investigate the company’s security practices. That was Wyden’s allegation—not a court’s or regulator’s legal finding. Microsoft later described how the attackers forged authentication tokens, while a federal review board separately examined the intrusion and issued recommendations.
What did Wyden accuse Microsoft of?
On July 27, 2023, Wyden called for scrutiny of Microsoft’s role in the Storm-0558 intrusion. He argued that the company bore significant responsibility and asked the Justice Department and Federal Trade Commission to investigate its practices. He also raised questions about protection of the signing key and oversight connected with government use of Microsoft services. These were requests for investigation, not established findings of legal negligence. Wyden’s announcement and his statement on the review set out his position.
Wyden later said: “I applaud President Biden and CISA Director Easterly for acting on my request for the board to review this recent espionage campaign, including cybersecurity negligence by Microsoft that enabled it,” according to his Senate statement. The word “negligence” here describes Wyden’s accusation; the available sources do not establish a court or regulator ruling that Microsoft was legally negligent.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
How did the Storm-0558 intrusion work?
Microsoft’s technical account says Storm-0558, which the company described as operating from China, acquired a Microsoft consumer account signing key and used it to forge authentication tokens. Those tokens let the attackers access email hosted by Microsoft. This is Microsoft’s explanation of the technical mechanism, not a finding attributed to Wyden or the later review board. Microsoft’s September 2023 investigation report describes the incident.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
In a March 12, 2024 update, Microsoft said information from its continued investigation did not change its customer guidance or indicate additional customer impact. The update said: “No additional customer action is required.” That statement is Microsoft’s guidance, not an independent assessment of the company’s conduct.
What did the federal review board conclude?
The Cyber Safety Review Board (CSRB) later reviewed the Summer 2023 Microsoft Exchange Online intrusion. CISA’s description says the review examined operational and strategic decisions that led to the intrusion and recommended practices for industry and government. As CISA summarized it: “The review detailed operational and strategic decisions that led to the intrusion and recommended specific practices for industry and government to implement to ensure an intrusion of this magnitude does not happen again.” Read CISA’s CSRB report page for the review’s scope and recommendations.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
A May 21, 2024 announcement from the U.S. House Committee on Homeland Security described the report as finding that 22 enterprise organizations and more than 500 individuals globally had been compromised. Those counts are the committee’s description of the CSRB report; they should not be recast as figures stated by Wyden or Microsoft. The committee announcement provides that account.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11How did Microsoft respond?
Microsoft said it was strengthening its cybersecurity work partly in response to the CSRB report and described briefing CISA on how it was implementing the board’s recommendations. Those statements describe the company’s response and reported progress; they are not the CSRB’s own conclusions. Microsoft outlined its position in its June 13, 2024 security response statement.
Quick Recap
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
How to distinguish the claims and findings
| Source | What it says | How to interpret it |
|---|---|---|
| Senator Ron Wyden | Alleged Microsoft cybersecurity negligence, argued the company bore significant responsibility, and sought federal scrutiny. | A senator’s allegation and request for investigation, not a legal determination. |
| Microsoft | Described the stolen signing key and forged-token mechanism, later investigation updates, and its security response. | The company’s technical account and statements about its own remediation. |
| CSRB and CISA | Reviewed operational and strategic decisions behind the intrusion and recommended practices for industry and government. | A separate review and set of recommendations; do not conflate them with Wyden’s original allegation or Microsoft’s account. |
| House Committee on Homeland Security | Described the CSRB report as documenting 22 affected enterprise organizations and more than 500 individuals globally. | The committee’s account of the report’s figures. |
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
