ThreatsHub.org
There are a number of ways attackers can exploit public information about your organization’s employees. CSO Online’s Susan Bradley walks through how an attacker can gain access to your organization’s Office 365 accounts and how you can protect your enterprise from these potential attacks. READ MORE HERE…
You have several options to set up alerts in Azure Active Directory to help spot risky user behavior. READ MORE HERE…
Use these techniques to inventory your network to determine which devices have BitLocker. READ MORE HERE…
This new add-on will let you set up alerts about suspicious sign-on activity for Office 365 and other cloud apps. READ MORE HERE…
Setting up a backup process in Azure is one way to quickly recover from a ransomware attack. READ MORE HERE…
Windows Defender Antivirus has hit a new milestone: the built-in antivirus capabilities on Windows can now run within a sandbox. With this new development, Windows Defender Antivirus becomes the first complete antivirus solution to have this capability and continues to lead the industry in raising the bar for security. Putting Windows Defender Antivirus in a
Read more
The post Windows Defender Antivirus can now run in a sandbox appeared first on Microsoft Secure. READ MORE HERE…
As part of our continued efforts to tackle entire classes of threats, Office 365 client applications now integrate with Antimalware Scan Interface (AMSI), enabling antivirus and other security solutions to scan macros and other scripts at runtime to check for malicious behavior. Macro-based threats have always been a prevalent entry point for malware, but we
Read more
The post Office VBA + AMSI: Parting the veil on malicious macros appeared first on Microsoft Secure. READ MORE HERE…
A new software supply chain attack unearthed by Windows Defender Advanced Threat Protection (Windows Defender ATP) emerged as an unusual multi-tier case. Unknown attackers compromised the shared infrastructure in place between the vendor of a PDF editor application and one of its software vendor partners, making the apps legitimate installer the unsuspecting carrier of a Read more READ MORE HERE…
In a previous post, in the spirit of our commitment to delivering industry-leading protection, customer choice, and transparency on the quality of our solutions, we shared insights and context into the results of AV-TESTs January-February 2018 test cycle. We released a transparency report to help our customers and the broader security community to stay informed Read more READ MORE HERE…
In late March 2018, I analyzed an interesting PDF sample found by ESET senior malware researcherAnton Cherepanov. The sample was initially reported to Microsoft as a potential exploit for an unknown Windows kernel vulnerability. During my investigation in parallel with ESET researchers, I was surprised to discover two new zero-day exploits in the same PDF. Read more READ MORE HERE…