Federal Cyber Experts Thought Microsoft’s Cloud Was “a Pile of Shit.” They Approved It Anyway.

ProPublicaCenter-LeftEN 25 min read 100% complete by Renee DudleyMarch 18, 2026 at 11:00 AM

AI Summary

long article 25 min

A ProPublica report reveals that FedRAMP, the federal program ensuring the security of cloud technology, authorized Microsoft's GCC High cloud product despite serious internal concerns about its security. Federal cybersecurity evaluators found Microsoft's security documentation lacking, hindering their ability to assess the system's overall security. This authorization occurred despite Microsoft products being central to recent major cyberattacks against the U.S. government. FedRAMP's approval of GCC High, intended to safeguard sensitive government information, included a warning to agencies about potential risks. The report also highlights potential conflicts of interest, as third-party firms vetting the technology are hired and paid by the companies being assessed.

Key Entities & Roles

Key Player Opposition Context

National Nuclear Security Administration 40% China 40% Russia 40% ProPublica ×260% United States ×270% GCC High (Government Community Cloud High) ×375% FedRAMP (Federal Risk and Authorization Management Program) ×485% Microsoft ×690%

Keywords

cloud security 90% cybersecurity 80% fedramp 80% microsoft 70% government data 60% cloud computing 60% gcc high 50% cybersecurity attacks 50% security assessment 50%

Sentiment Analysis

Very Negative

Score: -0.70

Source Transparency

Source

ProPublica

Political Lean

Center-Left (-0.40)

Far LeftCenterFar Right

Classification Confidence

90%

Geographic Perspective

United States

This article was automatically classified using rule-based analysis. The political bias score ranges from -1 (far left) to +1 (far right).

Topic Connections

Explore how the topics in this article connect to other news stories

No topic relationship data available yet. This graph will appear once topic relationships have been computed.

cloud security cybersecurity fedramp microsoft government data cloud computing gcc high cybersecurity attacks security assessment

Explore Full Topic Graph