Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesAs of Microsoft’s February 4, 2026 announcement, Hayete Gallot leads the company’s Security organization as Executive Vice President, Security, reporting to CEO Satya Nadella. Igor Tsyganskiy was named CISO effective January 1, 2024; the public announcements summarized here do not establish whether that title has since changed. Charlie Bell moved to an engineering-quality role, while Ales Holecek became Chief Architect for Security, reporting to Gallot.
How Microsoft’s security leadership changed
| Date | Change | What it means |
|---|---|---|
| November 2023 | Microsoft launched its Secure Future Initiative (SFI), a company-wide security effort. | The initiative followed the Storm-0558 intrusion and external scrutiny. Charlie Bell communicated an engineering action plan. |
| December 2023; effective January 1, 2024 | Bret Arsenault moved from CISO to Chief Cybersecurity Advisor after 14 years as CISO. Igor Tsyganskiy was appointed CISO. | This was a transition in the CISO role; the announcement did not characterize it as a dismissal. |
| January 12–19, 2024 | Microsoft disclosed that it had detected the Midnight Blizzard attack on January 12. | The disclosure became part of the documented context for the company’s subsequent security changes. |
| May–June 2024 | Microsoft described new security staffing, governance and leadership-accountability measures. | The company said it had added 1,600 security engineers in fiscal 2024 and planned 800 additional security positions in the following fiscal year. It also created an Office of the CISO with senior-level deputy CISOs. |
| February 4, 2026 | Satya Nadella announced Hayete Gallot as EVP, Security; Charlie Bell’s move to an engineering-quality role; and Ales Holecek’s appointment as Chief Architect for Security. | Gallot reports directly to Nadella. Holecek reports to Gallot. Bell’s new role focuses on engineering quality. |
Who is Microsoft’s security chief?
“Security chief” can mean more than one job at Microsoft. Gallot is the executive leading the Security organization in the February 2026 announcement. Tsyganskiy was named CISO effective January 1, 2024. Those titles describe different roles: the CISO is a specific security leadership post, while the EVP, Security leads the broader organization. The available announcements identify Gallot’s reporting line to Nadella and Holecek’s reporting line to Gallot, but do not specify Tsyganskiy’s reporting line in the material summarized here.
What the incidents changed—and what the record establishes
Storm-0558 and the Secure Future Initiative
Microsoft launched SFI in November 2023 after the Storm-0558 intrusion and external scrutiny. The company described it as an effort to improve security across products and legacy infrastructure, with an engineering action plan communicated by Bell. Nadella framed the priority as “prioritizing security above all else.”
Midnight Blizzard
Microsoft said it detected a Russian state-sponsored attack on January 12, 2024. The actor had used password spraying against a legacy, non-production test tenant beginning in late November 2023, then accessed a small percentage of corporate email accounts, including accounts belonging to senior leaders and cybersecurity staff. Microsoft disclosed the incident during January 12–19.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Staffing, governance and executive accountability
Alongside role changes, Microsoft described measures intended to give security more resources and oversight. Its reported 1,600 security engineers added in fiscal 2024 and plan for 800 additional security positions in the next fiscal year are distinct figures: the former is a completed staffing increase as reported by Microsoft; the latter is a plan, not a confirmed later total. The company also created an Office of the CISO with senior-level deputy CISOs. Nadella said a portion of senior leaders’ compensation would depend on security plans and milestones.
#1 Best Overall
Do the changes mean executives were fired over the breaches?
The announcements document changes in responsibilities and organizational structure, but do not establish that Arsenault, Bell or another named executive was removed as punishment for a particular incident. Arsenault was publicly described as moving to an advisory role after 14 years as CISO; Bell was later assigned an engineering-quality role; and Gallot was announced as the Security organization’s leader. The public record summarized here does not assign individual blame for Storm-0558 or Midnight Blizzard.
Quick Recap
Best Value
- It can be a gift option
- Comes with secure packaging
- Helpful in various ways
Rank #4
Rank #2
- Ideal for Gifting
- Ideal for a bookworm
- Compact for travelling
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
