The report describes Microsoft’s security culture as “inadequate” and requiring an overhaul.

The Windows maker was further criticized for how long it took to correct its initial statements regarding the attack.

Government review criticizes Microsoft for security lapses in preventable Exchange hack