Microsoft says it hasn’t been able to shake Russian state hackers

Microsoft admitted on March 8, 2024, that it had been unable to evict the elite Russian government hackers who broke into the email accounts of senior company executives in November and who it said have been trying to breach customer networks with stolen access data. (AP/File)
Short Url
Updated 09 March 2024
Follow

Microsoft says it hasn’t been able to shake Russian state hackers

  • The hackers from Russia’s SVR foreign intelligence service used data obtained in the intrusion to compromise some source-code repositories and internal systems, Microsoft says
  • Microsoft’s admission exposes the perils of the heavy reliance by government and business on the company’s software monoculture, say cybersecurity experts

BOSTON: Microsoft said Friday it’s still trying to evict the elite Russian government hackers who broke into the email accounts of senior company executives in November and who it said have been trying to breach customer networks with stolen access data.

The hackers from Russia’s SVR foreign intelligence service used data obtained in the intrusion, which it disclosed in mid-January, to compromise some source-code repositories and internal systems, the software giant said in a blog and a regulatory filing.
A company spokesman would not characterize what source code was accessed and what capability the hackers gained to further compromise customer and Microsoft systems. Microsoft said Friday that the hackers stole “secrets” from email communications between the company and unspecified customers — cryptographic secrets such as passwords, certificates and authentication keys — and that it was reaching out to them “to assist in taking mitigating measures.”
Cloud-computing company Hewlett Packard Enterprise disclosed on Jan. 24 that it, too, was an SVR hacking victim and that it had been informed of the breach — by whom it would not say — two weeks earlier, coinciding with Microsoft’s discovery it had been hacked.
“The threat actor’s ongoing attack is characterized by a sustained, significant commitment of the threat actor’s resources, coordination, and focus,” Microsoft said Friday, adding that it could be using obtained data “to accumulate a picture of areas to attack and enhance its ability to do so.” Cybersecurity experts said Microsoft’s admission that the SVR hack had not been contained exposes the perils of the heavy reliance by government and business on the Redmond, Washington, company’s software monoculture — and the fact that so many of its customers are linked through its global cloud network.
“This has tremendous national security implications,” said Tom Kellermann of the cybersecurity firm Contrast Security. “The Russians can now leverage supply chain attacks against Microsoft’s customers.”
Amit Yoran, the CEO of Tenable, also issued a statement, expressing both alarm and dismay. He is among security professionals who find Microsoft overly secretive about its vulnerabilities and how it handles hacks.
“We should all be furious that this keeps happening,” Yoran said. “These breaches aren’t isolated from each other and Microsoft’s shady security practices and misleading statements purposely obfuscate the whole truth.”
Microsoft said it had not yet determined whether the incident is likely to materially impact its finances. It also said the intrusion’s stubbornness “reflects what has become more broadly an unprecedented global threat landscape, especially in terms of sophisticated nation-state attacks.”
The hackers, known as Cozy Bear, are the same hacking team behind the SolarWinds breach.
When it initially announced the hack, Microsoft said the SVR unit broke into its corporate email system and accessed the accounts of some senior executives as well as employees on its cybersecurity and legal teams. It would not say how many accounts were compromised.
At the time, Microsoft said it was able to remove the hackers’ access from the compromised accounts on or about Jan. 13. But by then, they clearly had a foothold.
It said they got in by compromising credentials on a “legacy” test account but never elaborated.
Microsoft’s latest disclosure comes three months after a new US Securities and Exchange Commission rule took effect that compels publicly traded companies to disclose breaches that could negatively impact their business.


Saudi who swapped ejection seats for tech reviews — and topped KSA charts 

Updated 19 December 2025
Follow

Saudi who swapped ejection seats for tech reviews — and topped KSA charts 

  • In an exclusive interview with Arab News, the host of ‘2You’ and ‘Up To Date KSA’ talks about digital wellness, AI’s future, and his plans to fill the gap in Arabic tech content 
  • Top Arab content creator in Saudi Arabia’s 2025 top 10 most-viewed YouTube channels describes milestone as ‘shockingly’ positive 

LONDON: Speaking to Faisal Al-Saif, a self-described tech lover, one of the least likely things you expect to hear is advice on disconnecting from technology. 

Yet the idea of a “tech diet” — more commonly known as digital wellbeing — takes on added weight when it comes from someone whose work revolves around gadgets and who relies on social media as their primary platform. 

Beyond this seemingly analytical, Web 1.0-style perspective, Al-Saif draws on more than two decades of experience as a tech expert — or, in today’s terms, a content creator. 

“I’m an early believer that technology is here to connect us more, to make the world even smaller than what it is, and make us just more active, more productive, and have more time for our religion, for our families and for our actual lives,” Al-Saif told Arab News. 

Al-Saif trained as an aircraft engineer at BAE Systems, where he specialized in ejection seats for Royal Saudi Air Force jets, before entering broadcasting in 2004, hosting and producing KSA2’s English-language “2You” and, later, the technology show “Up To Date KSA.” 

In 2009, he pivoted to YouTube — a platform with more limited reach and no monetization at the time — to help fill the gap in Arabic tech content. 

“Back then, if you searched about a device or a system or a piece of information, the main language you would find the result in was English. So, I just started creating a channel and putting some good content in (both) Arabic and in English,” he said. 

This approach required filming videos twice. Initially, videos in English drew more views, while Arabic lagged, but that shifted month by month as Arabic content gained traction. 

“To put it in perspective, back then, it wasn’t a source of income — not a main, not a minor, not a partial.” 

Today, Al-Saif’s channel delivers straightforward reviews that guide viewers on whether to buy or avoid products based on their needs, not brand pressure. 

“I love creating content that gives value to the people. I love simplifying information. I love tech in a crazy way,” he said. “I like to see new tech, test it, be an early adopter of it. Tell people, ‘This is good because of this, and (that) could have been better with those implemented.’ Tell people to buy or not to buy based on their preferences, not based on companies and what they want to push.” 

Creators typically earn through ad revenue, fan funding, product placement, and sponsorships, though Al-Saif distances himself from the “influencer” label. 

“Part of it is that struggle we went through throughout the years, of trying to create valuable business propositions for everybody who works with us, being very fair and honest about what I present, and trying to help companies, just to help companies. Not seeking business.” 

Earlier this month, almost two decades after starting his channel, Al-Saif was named top Arab content creator — and the only regional entry — in Saudi Arabia’s 2025 top 10 most-viewed YouTube channels, a milestone he described as “shocking” in a positive sense. 

“Being on that top 10 list gives me a cool push after 16 years,” he said of his UTD Saudi channel, which has 8.92 million subscribers. 

“(When) I go into a hospital, I find a lot of Saudis that know me. But also, I find some Filipino nurses coming to me (telling me), ‘I watch your videos.’ I like that kind of diversity (which) is only possible on YouTube and educational content.” 

Al-Saif views YouTube as a modern visual library to help informed decisions. While social media shifts toward short-form videos, he believes the platform is resisting this trend. 

“If it’s all short-term content, it’s us supporting that short attention span (which) is being developed with people.”  

He champions long-form reviews, beginning with a brief story, then details, to encourage informed decisions. By contrast, he argued, three-second or ultra-short videos may be excellent at grabbing attention, but are largely useless for serious decisions, “unless (perhaps) it’s a cooking video.” 

In 2012, after seeing an opening, Al-Saif left BAE Systems — “initially only for two years” — to launch Tech Pills Productions, helping companies such as Intel, Microsoft, and HP create content, a move that boosted his career. He later diversified into tech startups, though he shuns the “investor” label. 

“I don’t see myself as an entrepreneur or an investor. I just see myself as a tech lover,” he said. “I try to push myself into diversifying the business and creating other pillars. So, I went into other types of investments, working and developing applications with different partners, and all of that went well. That part made me more comfortable creating content for the joy of it instead for the business side of it.” 

In 2021, Al-Saif backed Karaz (Arabic for “cherries”), an EHR platform using IoT, AI, and real-time data for healthcare, originally a gamified app for diabetic children. “(I’m drawn to a project) if there’s a human touch,” he said. “It’s relating data to human change in a positive way that made me not hesitate and go for it.” 

While AI pitches flood in, past flops have left him with a degree of “marketing resistance.” 

“I find that AI does add value if you have those (proper) steps into getting into AGI (artificial general intelligence) and the later steps that will come. It’s the proper development. But the hype about relating everything to AI, that part, I’m definitely against,” he said. 

AI has dominated headlines for three years, fueling an economic boom, and sparking debate over job losses and ethical risks. Al-Saif acknowledges the technology’s “endless opportunities,” but doubts the hype will last and that AI will ultimately drive the world. “They will find something else; either it’s diverted from AI or from another field in technology to create that marketing sense.” 

Asked what people should be more aware of, he urged greater public education on AI’s dual nature. 

“It’s a knife that you can cook with, or it’s a knife that can stab someone. There’s a seriousness about AI, and sadly, the world does not do enough regarding the sense of awareness,” he said. 

Without greater understanding, unchecked AI could create generations shaped entirely by whatever information they are fed, regardless of truth, he said, adding that the technology already enables bad behavior excused as “AI-generated” and blurs fact and fiction, making regulations essential. 

Saudi Arabia is leading responsibly through its Data and AI Authority, he said. “I think they’re going very well within multiple sides: the regulatory part, the governance side, as well as when it comes to investing heavily with the infrastructure and AI companies.”  

Through the authority, the Kingdom has launched an ambitious plan to position itself at the forefront of AI technology. Al-Saif has contributed directly and indirectly, including advising on public strategies such as the Riyadh Charter on AI Ethics in the Islamic World. 

“It’s a very interesting place to be (at a) very interesting time. I’ve sat with the Crown Prince (Mohammed bin Salman). He talked about AI, his vision, and how AI will create this next wave of businesses and next wave of economy.” 

Asked whether our society is obsessed with technological progress, Al-Saif replies that “we are adopting (technologies) for what we need,” but adds that limits, such as Australia’s recent social media ban for youth, are needed. “But the thing is, they don’t ban stuff in the Kingdom of Saudi Arabia. They try to create a system.” 

At home, he supervises his children’s screen time or watches content together. “YouTube is still, I find, the safest platform (out) there because of its nature of long videos and vlogs. It is much more mature than any other platform when it comes to how to censor, how to control, how to do things.” 

However, he agreed that younger generations, as tech natives, perceive tech interaction differently, specifically when it comes to privacy. 

“Privacy is kind of a stretchy thing. I define privacy different than my kids when they grow up, and that made me think of privacy different. It’s not that we’re letting go of information. It’s the environment that we live in that creates that sense of privacy.” 

Al-Saif believes privacy has already been reshaped — not as a value we hold dear, but as an illusion where true personal boundaries have been eroded. What remains is a mere reflection of our actions online, not tied to our names, but reduced to anonymous data points or numbers in the digital ether. 

For Al-Saif, part of the answer lies in the power of disconnection, an approach that he has strongly advocated. 

“I give myself an hour or two a day maximum (online) to know about certain other stuff. My advice for anybody who wants to live 12 hours of cool life is: Try to experience or to learn something unrelated to tech.” 

Pointing to a beehive he keeps in the office, Al-Saif added: “There are other fields that I like to, let’s say, learn about. It’s a clear state of mind that you reach with it. And I just try to do as normal, natural things as possible; try to work with gadgets and appliances that don’t have batteries.”