Lawmakers question Microsoft president over China ties, repeated breaches

Congressional hearings questioned Microsoft President Brad Smith over security failures after Chinese-linked hackers stole a signing key used to access senior U.S. officials' emails and media allegations that a known SAML vulnerability (Golden SAML) was later exploited in the SolarWinds campaign; the Cyber Safety Review Board attributed the breach to cascading security failures and lawmakers pressed Microsoft on its China operations, transparency, and remediation efforts.