Microsoft Defender Advanced Threat Protection Archives - Page 2 of 5

Modernizing the security operations center to better secure a remote workforce

June 22, 2020 TH Author Microsoft Cloud App Security, Microsoft Defender Advanced Threat Protection, Microsoft Defender ATP, Security Intelligence

The modern SOC will use machine learning to help humans protect organizations in a multi-cloud, IoT world.
The post Modernizing the security operations center to better secure a remote workforce appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

UEFI scanner brings Microsoft Defender ATP protection to a new level

June 17, 2020 TH Author Cybersecurity, Endpoint security, firmware scanning, firmware-level attacks, Microsoft Defender Advanced Threat Protection, Microsoft Defender Antivirus, Microsoft Defender ATP, Microsoft security intelligence, UEFI

The UEFI scanner is a new component of the built-in antivirus solution on Windows 10 and gives Microsoft Defender ATP the ability to scan inside of the firmware filesystem and perform security assessment.
The post UEFI scanner brings Microsoft Defender ATP protection to a new level appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

The science behind Microsoft Threat Protection: Attack modeling for finding and stopping evasive ransomware

June 10, 2020 TH Author AI and machine learning, Automation, Cybersecurity, data science, Endpoint security, human-operated ransomware, lateral movement, Microsoft Defender Advanced Threat Protection, Microsoft security intelligence, Microsoft Threat Protection, PARINACOTA, probablistic approach, ransomware, Security, Security Intelligence, Threat protection

Microsoft Threat Protection uses a data-driven approach for identifying lateral movement, combining industry-leading optics, expertise, and data science to deliver automated discovery of some of the most critical threats today.
The post The science behind Microsoft Threat Protection: Attack modeling for finding and stopping evasive ransomware appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Open-sourcing new COVID-19 threat intelligence

May 14, 2020 TH Author Azure Security, Microsoft Defender Advanced Threat Protection, Microsoft Defender ATP, Phishing, Secure remote work, Securing remote workers series, Threat protection

While the world faces the common threat of COVID-19, defenders are working overtime to protect users all over the globe from cyber-criminals using COVID-19 as a lure to mount attacks.
The post Open-sourcing new COVID-19 threat intelligence appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

How to gain 24/7 detection and response coverage with Microsoft Defender ATP

May 6, 2020 TH Author Cybersecurity, incident response, Microsoft Defender Advanced Threat Protection, Microsoft Defender ATP, Microsoft Intelligent Security Association (MISA), MISA, Security Intelligence, Security strategies

Security incidents don’t happen exclusively during business hours: attackers often wait until the late hours of the night to breach an environment.
The post How to gain 24/7 detection and response coverage with Microsoft Defender ATP appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Ransomware groups continue to target healthcare, critical services; here’s how to reduce risk

April 28, 2020 TH Author Cybersecurity, human-operated ransomware, Maze, Microsoft Defender Advanced Threat Protection, Microsoft security intelligence, NetWalker, PonyFinal, ransomware, REvil, RobbinHood, Vatet

Multiple ransomware groups that have been accumulating access and maintaining persistence on target networks for several months activated dozens of ransomware deployments in the first two weeks of April 2020.
The post Ransomware groups continue to target healthcare, critical services; here’s how to reduce risk appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Defending the power grid against supply chain attacks: Part 3 – Risk management strategies for the utilities industry

April 22, 2020 TH Author Advanced Threat Analytics, Cybersecurity, Cybersecurity deployment, Cybersecurity Policy, Data Privacy, Evolution of Microsoft Threat Protection, Evolution of Microsoft Threat Protection page, incident response, Information/data protection, Microsoft Defender Advanced Threat Protection, Microsoft Defender ATP, Microsoft Detection and Response Team (DART), Microsoft security intelligence, Network Security, Security Intelligence, Security Response, Security strategies, Windows Security

By working with governments, trade organizations, and suppliers, the utility industry can improve security across the supply chain.
The post Defending the power grid against supply chain attacks: Part 3 – Risk management strategies for the utilities industry appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Mobile security—the 60 percent problem

April 7, 2020 TH Author Azure Security, Endpoint security, Microsoft Defender Advanced Threat Protection, Microsoft Intune

What percentage of endpoints in your organization are currently protected?
The post Mobile security—the 60 percent problem appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Microsoft Defender ATP can help you secure your remote workforce

April 3, 2020 TH Author Microsoft Defender Advanced Threat Protection, Microsoft Defender ATP, Secure remote work, Securing remote workers series

Today, it’s important to adjust security policies to enable productivity from home, all while keeping sensitive data secure.
The post Microsoft Defender ATP can help you secure your remote workforce appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Microsoft works with healthcare organizations to protect from popular ransomware during COVID-19 crisis: Here’s what to do

April 1, 2020 TH Author coronavirus-themed threats, covid-19, Cybersecurity, Endpoint security, gateway, Healthcare, human-operated ransomware, Microsoft Defender Advanced Threat Protection, Microsoft security intelligence, ransomware, remote work, REvil, Secure remote work, Securing remote workers series, Security Intelligence, Sodinokibi, Threat protection, virtual private network (VPN), virtual private server (VPS), VPN

Microsoft identified several dozens of hospitals with vulnerable gateway and VPN appliances. We sent these hospitals a first-of-its-kind notification with important info about the vulnerabilities, how attackers can take advantage of them, and a strong recommendation to apply security updates.
The post Microsoft works with healthcare organizations to protect from popular ransomware during COVID-19 crisis: Here’s what to do appeared first on Microsoft Security. READ MORE HERE…