Microsoft security intelligence Archives - Page 16 of 20

Defending Exchange servers under attack

June 24, 2020 TH Author behavioral blocking and containment, Cybersecurity, Exchange Server, fileless, living-off-the-land, Microsoft security intelligence, Threat protection, web shell

Exchange servers are high-value targets. These attacks also tend to be advanced threats with highly evasive, fileless techniques. Keeping these servers safe from these advanced attacks is of utmost importance.
The post Defending Exchange servers under attack appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Microsoft continues to extend security for all with mobile protection for Android

June 23, 2020 TH Author Cybersecurity, Microsoft Defender ATP for Android, Microsoft Defender ATP for Linux, Microsoft security intelligence, mobile phishing, Mobile Security, mobile threat defense, mobile threats, Phishing

Announcing the public preview of Microsoft Defender ATP for Android! In the rapidly evolving world of mobile threats, Microsoft is taking a holistic approach to tackling these challenges and to securing enterprises and their data with our new mobile threat defense capabilities.
The post Microsoft continues to extend security for all with mobile protection for Android appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Inside Microsoft Threat Protection: Mapping attack chains from cloud to endpoint

June 18, 2020 TH Author Azure ATP, Cybersecurity, HOLMIUM, Inside Microsoft Threat Protection, Microsoft Cloud App Security, Microsoft Defender ATP, Microsoft security intelligence, Microsoft Threat Protection, MTP, Office 365 ATP, Threat protection

In the first blog in the Inside Microsoft Threat Protection series, we will show how MTP provides unparalleled end-to-end visibility into the activities of nation-state level attacks like HOLMIUM.
The post Inside Microsoft Threat Protection: Mapping attack chains from cloud to endpoint appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

UEFI scanner brings Microsoft Defender ATP protection to a new level

June 17, 2020 TH Author Cybersecurity, Endpoint security, firmware scanning, firmware-level attacks, Microsoft Defender Advanced Threat Protection, Microsoft Defender Antivirus, Microsoft Defender ATP, Microsoft security intelligence, UEFI

The UEFI scanner is a new component of the built-in antivirus solution on Windows 10 and gives Microsoft Defender ATP the ability to scan inside of the firmware filesystem and perform security assessment.
The post UEFI scanner brings Microsoft Defender ATP protection to a new level appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Exploiting a crisis: How cybercriminals behaved during the outbreak

June 16, 2020 TH Author COVID-19 themed attacks, Cybersecurity, Endpoint security, Microsoft security intelligence, Microsoft Threat Protection, Security Intelligence, Threat protection

Cybercriminals adapted their tactics to match what was going on in the world, and what we saw in the threat environment was parallel to the uptick in COVID-19 headlines and the desire for more information.
The post Exploiting a crisis: How cybercriminals behaved during the outbreak appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Blue teams helping red teams: A tale of a process crash, PowerShell, and the MITRE ATT&CK evaluation

June 11, 2020 TH Author Cybersecurity, Microsoft security intelligence, Microsoft Threat Protection, MITRE, PowerShell, Step 19

Inspired by MITRE’s transparency in publishing the payloads and tools used in the attack simulation, we’ll describe the mystery that is Step 19 and tell a story about how blue teams, once in a while, can share important learnings for red teams.
The post Blue teams helping red teams: A tale of a process crash, PowerShell, and the MITRE ATT&CK evaluation appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

The science behind Microsoft Threat Protection: Attack modeling for finding and stopping evasive ransomware

June 10, 2020 TH Author AI and machine learning, Automation, Cybersecurity, data science, Endpoint security, human-operated ransomware, lateral movement, Microsoft Defender Advanced Threat Protection, Microsoft security intelligence, Microsoft Threat Protection, PARINACOTA, probablistic approach, ransomware, Security, Security Intelligence, Threat protection

Microsoft Threat Protection uses a data-driven approach for identifying lateral movement, combining industry-leading optics, expertise, and data science to deliver automated discovery of some of the most critical threats today.
The post The science behind Microsoft Threat Protection: Attack modeling for finding and stopping evasive ransomware appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Secured-core PCs help customers stay ahead of advanced data theft

May 13, 2020 TH Author Cybersecurity, direct memory access (DMA), Microsoft security intelligence, Secured-core PCs, Thunderbolt controller firmware, Thunderspy

Secured-core PCs provide customers with Windows 10 systems that come configured from OEMs with a set of hardware, firmware, and OS features enabled by default, mitigating Thunderspy and any similar attacks that rely on malicious DMA.
The post Secured-core PCs help customers stay ahead of advanced data theft appeared first on Microsoft Security. READ MORE HERE…

Microsoft Secure

Microsoft researchers work with Intel Labs to explore new deep learning approaches for malware classification

May 8, 2020 TH Author AI and machine learning, Cybersecurity, deep learning, machine learning, malware-as-image, Microsoft security intelligence, transfer learning

Researchers from Microsoft Threat Protection Intelligence Team and Intel Labs collaborated to study the application of deep transfer learning technique from computer vision to static malware classification.
The post Microsoft researchers work with Intel Labs to explore new deep learning approaches for malware classification appeared first on Microsoft Security. READ MORE HERE…