Back in April, Microsoft security researchers observed the infamous Russian-backed hacking group STRONTIUM (also known as Fancy Bear or APT28) compromising popular IoT devices (a VOIP phone, an office printer, and a video decoder) across multiple customer locations.
US politicians slammed Microsoft for partnering with a Chinese military university on AI research that experts say could be used in Beijing's unprecedented persecution of its Muslim minority, with one prominent senator calling the partnership "deeply disturbing," and accusing Microsoft of being "complicit" in Chinese human rights abuses.
The Microsoft Defender Advanced Threat Protection (ATP) service featured in Windows 10 version 1809 alerted researchers to an NSA-inspired backdoor vulnerability in Huawei laptops. The PCManager software included in some Huawei’s Matebook systems allows unprivileged users to create processes with superuser privileges, according to a March 25 Microsoft security post.
It will allow the user to visualize, manage, control, share and monetize the data." According to the About page, Bali is based on the concept of "Inverse Privacy," the subject of a paper authored in 2014 by Yuri Gurevich, Efim Hudis and Jeannette Wing , who all worked for Microsoft Research at that time.