Microsoft answered Congress' questions on security. Now the White House needs to act

A feature article recounts Microsoft president Brad Smith’s congressional testimony on the company’s security failures highlighted by the DHS Cyber Safety Review Board, including China’s theft of U.S. government emails via a stolen signing key and allegations of an unfixed SAML/ADFS weakness linked to the SolarWinds intrusion. It critiques federal overreliance on Microsoft, examines bundling and competition concerns, and calls for executive and legislative actions—leveraging procurement, interoperability mandates, and “secure by design” principles—to enforce higher security standards and potentially pause further Microsoft integrations.