Microsoft Worker Arrested for Child Pornography After the Company Turned Him In

A Microsoft employee was arrested after police investigators found child pornography into his cloud storage account thanks to a tip sent by the Redmond-based software giant itself.

Gregory Rentfro, 49, of Duvall, who worked for Microsoft as a security engineer, uploaded four explicit pictures of minors involved in sexual acts. Redmond itself alerted the authorities, but it’s not yet clear if the company knew that it was its own employee or not.

“One of their customers had uploaded four images of minors engaged in sexually explicit conduct,” the court documents reveal according to KIRO7. “Rentfro admitted to finding depictions of minors engaged in sexually explicit conduct from the Internet. He said that he’d been saving them to an external hard drive until Microsoft closed his OneDrive account.”

Microsoft has already issued a sta...

nmap -sV --script vuln -p- <target-network>

tail -f /var/log/suricata/fast.log | grep <cve>

Check Vendor Security Advisory Bulletin

title: Detect Exploitation - Microsoft Worker Arrested for Child Pornography After the Company Turned Him In
id: 331c997e-a4d8-4d37-b07a-019d0f1392b8
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access

rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "Microsoft Worker Arrested for " ascii wide
    condition:
        any of them
}