Fighting Against Illegally Operating Cybersecurity Companies: Microsoft's and Technology Partners' Bold Steps

Indonesia, INTI – Microsoft has reaffirmed its commitment to combating cybersecurity companies that operate illegally, which develop and sell offensive cyber capabilities that threaten global security. With the increasing threat from these actors, more action needs to be taken to protect user security and privacy.

The Role of Amicus Brief in Combating Cyber Threats

Microsoft, alongside Google, LinkedIn, GitHub, TrendMicro, and Big Cloud Consultants, has submitted an amicus brief in a legal case filed by the Knight First Amendment Institute at Columbia University against NSO Group. NSO Group, an illegally operating cybersecurity company, has exploited technology from these companies to attack their users. Microsoft and its partners believe that victims of these attacks, even if they are outside the United States, deserve legal protection.

Significant Threat of Commercial Spyware

Commercial spyware, such as Pegasus developed by NSO Group, poses a significant threat to national security. This spyware allows unauthorized access to sensitive information, location data, and communications of individuals and organizations worldwide. Such disruptions can jeopardize diplomatic relations, military operations, human rights, and democracy.

Protecting American Technology Infrastructure

The U.S. government has a significant interest in protecting American technology companies from exploitation by illegally operating cybersecurity firms. By allowing access to and damaging devices and platforms without authorization, these companies endanger the stability, security, and trust in the services provided by technology companies.

Microsoft's Long-Term Commitment

For years, Microsoft has worked with partners in government, industry, and civil society to advocate for restricting state use of illegally operating cybersecurity firms. Along with its partners in the Cybersecurity Tech Accord, Microsoft has outlined industry principles to limit the expansion of offensive cyber operations.

Microsoft Threat Intelligence continuously tracks the activities of illegally operating cybersecurity firms, providing protection against their techniques and alerting customers about observed activities. Microsoft’s AccountGuard program offers advanced threat detection and notification to help protect high-risk users. Through its Secure Future Initiative, Microsoft is committed to ensuring the security of its products and services, promoting a safer ecosystem, and contributing to a more secure and resilient digital environment.

Collective Efforts to Combat Cyber Threats

Stopping illegally operating cybersecurity companies requires collective effort. The amicus brief filed by Microsoft and its partners highlights two main points:

1. The proliferation of commercial spyware by illegally operating cybersecurity firms is a significant threat to national security. This spyware undermines global privacy and security by providing unauthorized access to sensitive information.
2. The U.S. government has a major interest in protecting American technology companies from exploitation by illegally operating cybersecurity firms. Allowing unauthorized access and damage to devices jeopardizes the stability and trust in technology platforms.

Advocating Legal Protection for Victims

Microsoft and its partners believe that victims of attacks by illegally operating cybersecurity firms deserve legal protection. By providing a path for victims to seek justice and establishing legal consequences for these companies, it is hoped that these illegal practices can be reduced. Entities involved in developing and supporting offensive cyber capabilities should be held accountable in U.S. courts.

To showcase more innovations in technology and cybersecurity, Microsoft and its partners will participate in Indonesia Technology and Innovation 2024 (INTI 2024) at JI-EXPO from August 12-14, 2024. INTI is the largest technology and innovation exhibition in Indonesia, featuring the latest solutions in technology and cybersecurity. More information is available at https://inti.asia.