Microsoft stops counting on China engineers for Pentagon cloud assist

Microsoft on Friday revised its practices to make sure that engineers in China now not present technical assist to U.S. protection shoppers utilizing the corporate’s cloud companies.

The corporate carried out the adjustments in an effort to scale back nationwide safety and cybersecurity dangers stemming from its cloud work with a serious buyer. The announcement got here days after ProPublica revealed an in depth report describing the Protection Division’s dependence on Microsoft software program engineers in China.

“In response to considerations raised earlier this week about US-supervised overseas engineers, Microsoft has made adjustments to our assist for US Authorities prospects to guarantee that no China-based engineering groups are offering technical help for DoD Authorities cloud and associated companies,” Frank Shaw, the Microsoft’s chief communications officer, wrote in a Friday X publish.

The change impacts the work of Microsoft’s Azure cloud companies division, which analysts estimate now generates greater than 25% of the corporate’s income. That makes Azure greater than Google Cloud however smaller than Amazon Internet Providers. Microsoft receives “substantial income from authorities contracts,” in accordance with its most up-to-date quarterly earnings assertion, and greater than half of the corporate’s $70 billion in first-quarter income got here from prospects based mostly within the U.S.

In 2019, Microsoft received a $10 billion cloud-related protection contract, however the Pentagon wound up canceling it in 2021 after a authorized battle. In 2022, the division gave cloud contracts value as much as $9 billion in complete to Amazon, Google, Oracle and Microsoft.

ProPublica reported that the work of Microsoft’s Chinese language Azure engineers is overseen by “digital escorts” within the U.S., who sometimes have much less technical prowess than the workers they handle abroad. The report detailed how the “digital escort” association would possibly go away the U.S. weak to a cyberattack from China.

“That is clearly unacceptable, particularly in immediately’s digital menace setting,” Protection Secretary Pete Hegseth mentioned in a video posted to X on Friday. He described the structure as “a legacy system created over a decade in the past, through the Obama administration.” The Protection Division will assessment its methods in seek for comparable exercise, Hegseth mentioned.

Microsoft initially informed ProPublica that its staff and contractors have been adhering to U.S. authorities guidelines.

“We stay dedicated to offering essentially the most safe companies doable to the US authorities, together with working with our nationwide safety companions to judge and regulate our safety protocols as wanted,” Shaw wrote.

WATCH: Microsoft Safety VP Vasu Jakkal talks cybersecurity with Jim Cramer