![\"\"](\"https:\/\/www.oxebridge.com\/emma\/wp-content\/uploads\/2023\/07\/wakemanappearnances.jpg\")
<\/a>Just some of Wakeman’s CMMC appearances over the past few years.<\/p><\/div>\n
Anyone paying attention to the CMMC debacle<\/a> for more than five minutes has undoubtedly been exposed to the endless shilling by Microsoft’s Richard Wakeman<\/a>, a guy who pulled off a neat career trick by apparently being first at MS to jump into the CMMC scene, thus ensuring his top spot at MS as their go-to expert. Wakeman convinced Microsoft to go all-in on CMMC, and is now the “Senior Director of Aerospace and Defense for\u00a0Azure Global<\/em>” at MS. He’s also been present at nearly every CMMC convention ever held since the dinosaurs roamed the Earth, and was a constant, near-nagging voice<\/a> telling people to adopt CMMC as soon as they could.<\/p>\n The Jokes Write Themselves<\/strong><\/span><\/p>\n To those of us with functioning critical thinking faculties, it’s always been a matter of when, not if, the punchline would write itself. There’s no company whose products are more hacked than those of Microsoft, and their billion-year history is an ongoing, real-time case example of how not<\/strong> <\/em>to release secure products. For decades, IT professionals around the world have insisted the best way to secure a Microsoft-based system was to switch to Linux<\/strong><\/em>. (Like here in 2022<\/a>, or here in 2015<\/a>, or here in 2001<\/a>, or here in 1999<\/a>, or here in 1994<\/a>, or… well,\u00a0 you get the point.)<\/p>\n Now, in 2023, nearly four years after Katie Arrington slurred her words and promised CMMC was imminent any day now, we see that Microsoft’s Azure platform — you know, the one that WAKEMAN IS SENIOR DIRECTOR OF<\/strong><\/em>, was hacked by China<\/a>.<\/p>\n Microsoft on Friday said a validation error in its source code allowed for Azure Active Directory (Azure AD) tokens to be forged by a malicious actor known as\u00a0Storm-0558\u00a0using a Microsoft account (MSA) consumer signing key to breach two dozen organizations.<\/p>\n The attacks singled out approximately 25 organizations, including government entities and associated consumer accounts, to gain unauthorized email access and exfiltrate mailbox data.<\/p><\/blockquote>\n In case you missed the subhead, I said that China hacked Microsoft Azure:<\/strong><\/em><\/a><\/p>\n Microsoft still doesn\u2019t know \u2014 or want to share \u2014 how China-backed hackers stole a key that allowed them to stealthily break into dozens of email inboxes, including those belonging to\u00a0several federal government agencies.<\/p><\/blockquote>\n It gets worse<\/strong><\/em>. According to CNN<\/a>, “the email accounts of Commerce Secretary Gina Raimondo and State Department officials were breached in the activity.<\/em>” That same report reveals that it wasn’t even Microsoft that discovered the hack — presumably because Wakeman was too busy on the CMMC speaking circuit — but the US State Department, which “detected the cyber activity in June and reported it to Microsoft<\/em>.”<\/p>\n This comes as a surprise to maybe one person (Wakeman, I presume) and no one else.<\/p>\n Did I mention that China hacked Azure?\u00a0Now remember that the Dept. of Defense gave oversight authority over the CMMC scheme to the IAAC, a group out of Mexico<\/a>, which itself answers to the IAF, which counts as one of its executives a literal member of the Chinese Communist Party<\/strong><\/em>, Xiao Jianhua<\/a>:<\/p>\n Capture from official IAF tax return for 2021 showing CCP member Xiao Jianhua as an officer. The DoD has put the IAF in charge of the CMMC Accreditation Body. Source: Nonprofit Explorer.<\/em><\/a><\/p><\/div>\n That means that any complaint filed in the CMMC system will eventually be adjudicated by foreign actors, potentially from China itself.<\/p>\n Here There Be Shysters<\/strong><\/span><\/p>\n The reality is that nearly no one — not a single person<\/strong><\/em> — involved in the CMMC scam is trustworthy. In nearly every case, we find they are wholly unqualified or untalented or just boozy gimps who you wouldn’t trust lending your car to, never mind relying on for cybersecurity advice. These people are self-promoting bottom feeders, whose only chance at success relies on finding some Ponzi scheme or multi-level-marketing scam to propel their career, which inevitably comes falling back down to earth like the meteor because eventually people see through it. Look at the giant crater left by Arrington’s fall from grace, for example. Do you know how many mammals were killed in that extinction event?<\/p>\n If I was Bob Metzger or Jacob Horne, I’d be seriously considering switching to selling Amway or Cayman Island timeshares right about now. I mean, hell, they are certainly qualified, and Armie Hammer could probably use the company<\/a>.<\/p>\n But this won’t stop Wakeman from shilling for a product that his own company hasn’t even utilized, nor from joining the increasingly-ridiculous chorus of idiots claiming that CMMC is the cure for everything from Chinese hacks to toenail cancer. Oh, no, he’s all set to walk on stage and brave full-on public humiliation at “CMMC Con” this September<\/a>, where — like Comic Con — apparently there will be lots of cosplay, where nerds with Evil Spock Beards<\/a> dress up as serious cybersecurity professionals.<\/p>\n The only question anyone should be asking Wakeman at any event is this: if CMMC is so great, why does China have the keys to Microsoft Azure?<\/strong><\/em><\/p>\n I’d ask him personally, but the delicate flower has me blocked on LinkedIn, like nearly every other CMMC mouthpiece, because God forbid they should hear anything that would upset their flimsy worldview.<\/p>\n Hey, DoD: Fix This!<\/strong><\/span><\/p>\n CMMC cannot succeed because it is based on faulty principles and was launched as a corrupt scheme to reward a few DoD flunkies and their private-sector pals. Worse, it’s been proven not to have any effect on China’s ambitions, and it doesn’t matter because the morons at DoD have already decided that China should oversee the entire CMMC program anyway<\/strong><\/em>. (And, no, I am not kidding<\/a>.) The DoD must dismantle this nightmare as soon as possible, and look at real ways to ensure the nation’s defense on the cyber front, without the cronyism, corruption, and collusion. By doing so, we might finally free ourselves of idiots like Wakeman.<\/p>\n And if you’re wondering why I’m upset about this, consider the millions of dollars being spent right now by companies and individuals buying useless CMMC credentials and preparing for unlikely CMMC “assessments.” You think Wakeman is going to reimburse you?<\/p>\n [In case it needs to be repeated, the above is my opinion<\/strong> and must be treated that way. So be sure to include this footer in any copy you send to your attorney.]\u00a0<\/em><\/p>","protected":false},"excerpt":{"rendered":" Microsoft’s Richard Wakeman is head of Azure, which was hacked by China. Awkward.<\/p>","protected":false},"author":2,"featured_media":28959,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","mc4wp_mailchimp_campaign":[],"footnotes":""},"categories":[7774,5],"tags":[7679,938,7683,939,8348,7681,8347,8346,8233],"class_list":["post-28956","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cmmc","category-opinion","tag-cmmc","tag-cybersecurity","tag-cybersecurity-maturity-model-certification","tag-hack","tag-jacob-horne","tag-katie-arrington","tag-microsoft","tag-richard-wakeman","tag-robert-metzger","et-has-post-format-content","et_post_format-et-post-format-standard"],"_links":{"self":[{"href":"https:\/\/www.oxebridge.com\/emma\/wp-json\/wp\/v2\/posts\/28956","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.oxebridge.com\/emma\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.oxebridge.com\/emma\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.oxebridge.com\/emma\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.oxebridge.com\/emma\/wp-json\/wp\/v2\/comments?post=28956"}],"version-history":[{"count":4,"href":"https:\/\/www.oxebridge.com\/emma\/wp-json\/wp\/v2\/posts\/28956\/revisions"}],"predecessor-version":[{"id":28964,"href":"https:\/\/www.oxebridge.com\/emma\/wp-json\/wp\/v2\/posts\/28956\/revisions\/28964"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.oxebridge.com\/emma\/wp-json\/wp\/v2\/media\/28959"}],"wp:attachment":[{"href":"https:\/\/www.oxebridge.com\/emma\/wp-json\/wp\/v2\/media?parent=28956"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.oxebridge.com\/emma\/wp-json\/wp\/v2\/categories?post=28956"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.oxebridge.com\/emma\/wp-json\/wp\/v2\/tags?post=28956"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}<\/a>