Category: Microsoft Security Blog

11 best practices for securing data in cloud services

2023-07-05 17:07

This blog explores the importance and best practices for securing data in the cloud. It discusses concepts such as authentication, zero trust, and encryption, among others. The post 11 best practices for securing data in cloud services appeared first on…

Patch me if you can: Cyberattack Series

2023-06-30 07:06

The Microsoft Incident Response team takes swift action to help contain a ransomware attack and regain positive administrative control of the customer environment. The post Patch me if you can: Cyberattack Series appeared first on Microsoft Security Blog. This article…

How automation is evolving SecOps—and the real cost of cybercrime

2023-06-29 13:06

ramsac Founder and Managing Director Rob May shares insights on how automation can support SecOps and how to protect against phishing attacks. The post How automation is evolving SecOps—and the real cost of cybercrime appeared first on Microsoft Security Blog.…

Microsoft at NICE Conference: Resetting expectations and enabling diversity in the cybersecurity workforce

2023-06-27 22:06

With the skills gap in cybersecurity professionals, Microsoft is helping attract new generations of diversified talent to the field, including leading discussions at the 2023 NICE Conference. The post Microsoft at NICE Conference: Resetting expectations and enabling diversity in the…

Why endpoint management is key to securing an AI-powered future

2023-06-27 05:06

With the coming wave of AI, this is precisely the time for organizations to prepare for the future. To be properly ready for AI, Zero Trust principles take on new meaning and scope. The right endpoint management strategy can help…

IoT devices and Linux-based systems targeted by OpenSSH trojan campaign

2023-06-23 11:06

Microsoft has uncovered an attack leveraging custom and open-source tools to target internet-facing IoT devices and Linux-based systems. The attack involves deploying a patched version of OpenSSH on affected devices to allow root login and the hijack of SSH credentials.…

Expanding horizons—Microsoft Security’s continued commitment to multicloud

2023-06-15 00:06

Learn how to manage multicloud security risk with Microsoft’s native multicloud protection for three of the industry’s main cloud platforms. The post Expanding horizons—Microsoft Security’s continued commitment to multicloud appeared first on Microsoft Security Blog. This article has been indexed…

Public preview: Improve Win32 app security via app isolation

2023-06-14 21:06

The frequency and impact of zero-day vulnerabilities have witnessed a substantial increase over the years. Attackers frequently exploit either unknown or unpatched vulnerabilities. That’s why we are thrilled to announce the preview of Win32 app isolation. The post Public preview:…

Cadet Blizzard emerges as a novel and distinct Russian threat actor

2023-06-14 21:06

Microsoft attributes several campaigns to a distinct Russian state-sponsored threat actor tracked as Cadet Blizzard (DEV-0586), including the WhisperGate destructive attack, Ukrainian website defacements, and the hack-and-leak front “Free Civilian”. The post Cadet Blizzard emerges as a novel and distinct…

Forrester names Microsoft a Leader in the 2023 Enterprise Email Security Wave

2023-06-14 06:06

Microsoft Defender for Office 365 is recognized as a Leader in Forrester’s 2023 Enterprise Email Security Wave Report. The post Forrester names Microsoft a Leader in the 2023 Enterprise Email Security Wave appeared first on Microsoft Security Blog. This article…

How Microsoft and Sonrai integrate to eliminate attack paths

2023-06-14 06:06

Cloud development challenges conventional thinking about risk. Sonrai integrates with Microsoft Sentinel to monitor threats across vectors and automate responses by leveraging security orchestration, automation, and response playbooks, and Microsoft Defender for Cloud to provide visibility across the entire digital…

Detecting and mitigating a multi-stage AiTM phishing and BEC campaign

2023-06-09 08:06

Microsoft Defender Experts observed a multi-stage adversary-in-the-middle (AiTM) and business email compromise (BEC) attack targeting banking and financial services organizations over two days. This attack originated from a compromised trusted vendor, involved AiTM and BEC attacks across multiple supplier/partner organizations…

Join our digital event to learn what’s new in Microsoft Entra

2023-06-08 12:06

Join us at the digital event Reimagine secure access with Microsoft Entra to explore how to make identity your first line of defense and to hear about innovative products. The post Join our digital event to learn what’s new in…

Why a proactive detection and incident response plan is crucial for your organization

2023-06-07 02:06

Matt Suiche of Magnet Forensics talks about top security threats for organizations and strategies for effective incident response. The post Why a proactive detection and incident response plan is crucial for your organization appeared first on Microsoft Security Blog. This…

XDR meets IAM: Comprehensive identity threat detection and response with Microsoft

2023-06-01 03:06

Identity-based attacks are on the rise, making identity protection more important than ever. Explore our blog post to learn how Microsoft’s Identity Threat Detection and Response can help. The post XDR meets IAM: Comprehensive identity threat detection and response with…

New macOS vulnerability, Migraine, could bypass System Integrity Protection

2023-05-30 18:05

A new vulnerability, which we refer to as “Migraine”, could allow an attacker with root access to bypass System Integrity Protection (SIP) in macOS and perform arbitrary operations on a device. The post New macOS vulnerability, Migraine, could bypass System…

Volt Typhoon targets US critical infrastructure with living-off-the-land techniques

2023-05-25 16:05

Chinese state-sponsored actor Volt Typhoon is using stealthy techniques to target US critical infrastructure, conduct espionage, and dwell in compromised environments. The post Volt Typhoon targets US critical infrastructure with living-off-the-land techniques appeared first on Microsoft Security Blog. This article…

Microsoft Build 2023: Announcing new identity, compliance, and security features from Microsoft Security

2023-05-23 19:05

Microsoft Build 2023 is the place to discover new features and technologies, share ideas, and boost your skills. Learn about the new identity and compliance features we’re announcing. The post Microsoft Build 2023: Announcing new identity, compliance, and security features…

Cyber Signals: Shifting tactics fuel surge in business email compromise

2023-05-19 16:05

Business email operators seek to exploit the daily sea of email traffic to lure victims into providing financial and other sensitive business information. The post Cyber Signals: Shifting tactics fuel surge in business email compromise appeared first on Microsoft Security…

Microsoft Security highlights from RSA Conference 2023

2023-05-15 17:05

At RSA Conference April 24 to 26, 2023, Microsoft Security shared solution news and insights. Watch Vasu Jakkal’s keynote on-demand (video courtesy of RSA conference). The post Microsoft Security highlights from RSA Conference 2023 appeared first on Microsoft Security Blog.…

How Microsoft can help you go passwordless this World Password Day

2023-05-04 14:05

Learn how guessing, replay, phishing, and multifactor authentication fatigue attacks demonstrate the ongoing vulnerability of passwords, and why going passwordless makes your organization more secure while improving user experience. The post How Microsoft can help you go passwordless this World…

Forrester names Microsoft a Leader in 2023 Infrastructure-as-a-Service Platform Native Security report

2023-05-03 17:05

Forrester recognizes Microsoft’s strong vision and significant investments in Infrastructure-as-a-Service Platform Native Security offerings. The post Forrester names Microsoft a Leader in 2023 Infrastructure-as-a-Service Platform Native Security report appeared first on Microsoft Security Blog. This article has been indexed from…

Why you should practice rollbacks to prevent data loss in a ransomware attack

2023-04-27 17:04

Tanya Janca, Founder and Chief Executive Officer of We Hack Purple, shares insights on application security and offers strategies to protect against data loss from ransomware attacks. The post Why you should practice rollbacks to prevent data loss in a…

Healthy security habits to fight credential breaches: Cyberattack Series

2023-04-26 17:04

This is the second in an ongoing series exploring some of the most notable cases of the Microsoft Incident Response Team. In this story, we’ll explore how organizations can adopt a defense-in-depth security posture to help protect against credential breaches…

Microsoft announces the 2023 Microsoft Security Excellence Awards winners

2023-04-25 17:04

At the fourth annual Microsoft Security Excellence Awards, we recognized outstanding contributions from Microsoft Intelligent Security Association (MISA) members and celebrated the next generation of security defenders. See all the finalists and winners. The post Microsoft announces the 2023 Microsoft…

Stay compliant and protect sensitive data with Zero Trust security

2023-04-24 18:04

Learn how to secure data and identities and meet compliance requirements with a comprehensive Zero Trust approach. The post Stay compliant and protect sensitive data with Zero Trust security appeared first on Microsoft Security Blog. This article has been indexed…

Getting started with the CDMC framework—Microsoft’s guide to cloud data management

2023-04-24 17:04

Learn how Cloud Data Management Capabilities (CDMC) certification can build trust with your customers and provide a standard for data governance and controls for managing sensitive data at scale. The post Getting started with the CDMC framework—Microsoft’s guide to cloud…

Microsoft Entra delivers 240 percent ROI, according to new Forrester study

2023-04-20 17:04

Learn why Microsoft Entra delivers 240-percent ROI—get key benefits and real-world learnings from adopters across the financial, high-tech, and manufacturing sectors. The post Microsoft Entra delivers 240 percent ROI, according to new Forrester study appeared first on Microsoft Security Blog.…

Simplified endpoint management with Microsoft Intune Suite: Adopting a long-term approach with intelligence and automation

2023-04-19 17:04

Do you feel like your endpoint management set-up is too complex? This step-by-step guide will help you create a vision and set you on the path to simpler endpoint management. The post Simplified endpoint management with Microsoft Intune Suite: Adopting…

Nation-state threat actor Mint Sandstorm refines tradecraft to attack high-value targets

2023-04-18 16:04

Today, Microsoft is reporting on a distinct subset of Mint Sandstorm (formerly known as PHOSPHORUS), an Iranian threat actor that specializes in hacking into and stealing sensitive information from high-value targets. This subset is technically and operationally mature, capable of…

Microsoft shifts to a new threat actor naming taxonomy

2023-04-18 16:04

Microsoft is excited to announce that we are shifting to a new threat actor naming taxonomy aligned to the theme of weather. The complexity, scale, and volume of threats is increasing, driving the need to reimagine not only how Microsoft…

Protect intellectual property with Govern 365 and Microsoft Purview

2023-04-17 18:04

Learn how to secure sensitive information within your global supply chain with Netwoven Govern 365 and Microsoft Purview Information Protection. The post Protect intellectual property with Govern 365 and Microsoft Purview appeared first on Microsoft Security Blog. This article has…

See product news and on-demand sessions from Microsoft Secure

2023-04-17 17:04

Microsoft Secure on March 28, 2023, was a major success, thanks to more than 51,000 virtual attendees. It’s not too late to watch a session you missed. Watch on-demand. The post See product news and on-demand sessions from Microsoft Secure…

Threat actors strive to cause Tax Day headaches

2023-04-13 18:04

With U.S. Tax Day approaching, Microsoft has observed phishing attacks targeting accounting and tax return preparation firms to deliver the Remcos RAT and compromise target networks. The post Threat actors strive to cause Tax Day headaches appeared first on Microsoft…

Improve supply chain security and resiliency with Microsoft

2023-04-13 16:04

The Microsoft Supply Chain Platform was just launched to help companies protect their supply chains against cyber threats. The post Improve supply chain security and resiliency with Microsoft appeared first on Microsoft Security Blog. This article has been indexed…

LinkedIn and Microsoft Entra introduce a new way to verify your workplace

2023-04-12 14:04

LinkedIn members can use a Microsoft Entra Verified ID credential issued from their organization to verify their workplace on their public profile and add instant credibility, increasing trust and confidence in interactions. The post LinkedIn and Microsoft Entra introduce a…

Guidance for investigating attacks using CVE-2022-21894: The BlackLotus campaign

2023-04-11 18:04

This guide provides steps that organizations can take to assess whether users have been targeted or compromised by threat actors exploiting CVE-2022-21894 via a Unified Extensible Firmware Interface (UEFI) bootkit called BlackLotus. The post Guidance for investigating attacks using CVE-2022-21894:…

DEV-0196: QuaDream’s “KingsPawn” malware used to target civil society in Europe, North America, the Middle East, and Southeast Asia

2023-04-11 17:04

Microsoft analyzes a threat group tracked as DEV-0196, the actor’s iOS malware “KingsPawn”, and their link to an Israel-based private sector offensive actor (PSOA) known as QuaDream, which reportedly sells a suite of exploits, malware, and infrastructure called REIGN, that’s…

MERCURY and DEV-1084: Destructive attack on hybrid environment

2023-04-07 17:04

Microsoft detected a unique operation where threat actors carried out destructive actions in both on-premises and cloud environments. The post MERCURY and DEV-1084: Destructive attack on hybrid environment appeared first on Microsoft Security Blog. This article has been indexed from…

DevOps threat matrix

2023-04-06 18:04

In this blog, we discuss threats we face in our DevOps environment, introducing our new threat matrix for DevOps. Using this matrix, we show the different techniques an adversary might use to attack an organization from the initial access phase…

Secure hybrid and remote workplaces with a Zero Trust approach

2023-04-06 17:04

Secure your organization’s digital estate through a comprehensive Zero Trust approach. The post Secure hybrid and remote workplaces with a Zero Trust approach appeared first on Microsoft Security Blog. This article has been indexed from Microsoft Security Blog Read the…

Discover a new era of security with Microsoft at RSAC 2023

2023-04-05 23:04

Microsoft Security will be at the 2023 RSA Conference and we’d love to connect with you there. In this blog post, we share all the ways you can—plus, attend the Pre-Day with Microsoft and watch the Microsoft Security Copilot demo.…

Discover a new era of security with Microsoft at RSA 2023

2023-04-04 17:04

Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

2023-03-04 01:03

Gartner has again recognized Microsoft as a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms, positioned highest on the Ability to Execute. The post Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint…