A cyber review board mandated by President Biden issued a scathing report on Microsoft over a 2023 hack. (Getty Images)
A few hours after Cotton's X post, Hegseth responded, "Spot on senator."
"Agree fully," Hegseth said in his own X post responding to Cotton. "Our team is already looking into this ASAP. Foreign engineers — from any country, including of course China — should NEVER be allowed to maintain or access DOD systems."
The ProPublica report cited current and former employees and government contractors who worked on a cloud computing program deployed by Microsoft in 2016, which involved a "digital escort" framework. The program, meant to meet federal contracting regulations, used a system of "digital escort" chaperones for global cybersecurity officials, such as those based in China, meant to create a security buffer so that they can work on agency computing systems. DOD guidelines require that people handling sensitive data be U.S. citizens or permanent residents.
HEGSETH ABRUPTLY PULLS PENTAGON OFFICIALS FROM ‘GLOBALIST’ ASPEN CONFERENCE
According to sources who spoke to ProPublica, including some who had intimate familiarity with the hiring process for the $18-per-hour "digital escort" position, the tech employees being hired to do the supervising lacked the adequate tech expertise to prevent a rogue Chinese employee from hacking the system or turning over classified information to the CCP.
The sources elaborated that the escorts, often former military personnel, were hired for their security clearances more than their technical abilities and often lacked the skills to evaluate code being used by the engineers they were supervising.
In China, people are governed by sweeping laws compelling government cooperation with data collection efforts.
A Black Hawk Army helicopter carrying reporters lands at the Pentagon after a demonstration of future combat systems for Army Secretary Francis Harvey, Army Chief of Staff General Peter Schoomaker and the media at Aberdeen Proving Ground in Maryland. (Scott J. Ferrell/Congressional Quarterly/Getty Images)
A Microsoft spokesperson defended the company's "digital escort" model Tuesday, saying all personnel and contractors with privileged access must pass federally approved background checks.
"For some technical requests, Microsoft engages our team of global subject-matter experts to provide support through authorized U.S. personnel, consistent with U.S. government requirements and processes," the spokesperson added. "In these instances, global support personnel have no direct access to customer data or customer systems."
CLICK HERE TO GET THE FOX NEWS APP
The Defense Information Systems Agency's (DISA) public information office was initially unaware of the program when ProPublica began asking questions about it, but it eventually followed up to point out that "digital escorts" are used "in select unclassified environments" at the Defense Department for "advanced problem diagnosis and resolution from industry subject-matter experts."
In Cotton's letter to Hegseth, the Republican senator requested answers to his questions by the end of the month.
Microsoft did not immediately respond to Fox News Digital's requests for comment on this article.
https://www.foxnews.com/politics/pentagon-probe-microsofts-use-chinese-engineers-sensitive-defense-systems-hegseth-says