CrowdStrike CEO appears to have got Microsoft all cross when he dubbed its security approach a “leaky lifeboat”.
George Kurtz told the gathered throngs at XChange Best of Breed conference in Atlanta attributed a majority of cyberbreaches to Microsoft products, compared the software behemoth’s total security offerings to a “leaky lifeboat” and its authentication architecture “a mess”.
“The Microsoft environment is the only environment that I know of that you can take a password and just reuse it. Right? And it’s a huge architectural issue. That was in 1999. You can do that today. … You can take those passwords out of memory and basically just do the same technique in 2022. And it’s even worse now because there‘s a hodgepodge of syncing and you know that you have SAML tickets and golden SAML tickets. I mean, it’s a real mess.”