Microsoft – Page 23 – PossibleThreat Articles

Credit to Author: Microsoft Security Threat Intelligence – Editor| Date: Tue, 11 Apr 2023 17:00:00 +0000

This guide provides steps that organizations can take to assess whether users have been targeted or compromised by threat actors exploiting CVE-2022-21894 via a Unified Extensible Firmware Interface (UEFI) bootkit called BlackLotus.

The post Guidance for investigating attacks using CVE-2022-21894: The BlackLotus campaign appeared first on Microsoft Security Blog.

Microsoft Security

DEV-0196: QuaDream’s “KingsPawn” malware used to target civil society in Europe, North America, the Middle East, and Southeast Asia

April 11, 2023 0 Comments cybersecurity, Microsoft, Microsoft security intelligence, Mobile, private-sector offensive actor (psoa), Security

Credit to Author: Microsoft Security Threat Intelligence| Date: Tue, 11 Apr 2023 16:00:00 +0000

Microsoft analyzes a threat group tracked as DEV-0196, the actor’s iOS malware “KingsPawn”, and their link to an Israel-based private sector offensive actor (PSOA) known as QuaDream, which reportedly sells a suite of exploits, malware, and infrastructure called REIGN, that’s designed to exfiltrate data from mobile devices.

The post DEV-0196: QuaDream’s “KingsPawn” malware used to target civil society in Europe, North America, the Middle East, and Southeast Asia appeared first on Microsoft Security Blog.

Microsoft Security

MERCURY and DEV-1084: Destructive attack on hybrid environment

April 7, 2023 0 Comments cybersecurity, mercury, Microsoft, Microsoft security intelligence, Security

Credit to Author: Microsoft Security Threat Intelligence| Date: Fri, 07 Apr 2023 16:00:00 +0000

Microsoft detected a unique operation where threat actors carried out destructive actions in both on-premises and cloud environments.

The post MERCURY and DEV-1084: Destructive attack on hybrid environment appeared first on Microsoft Security Blog.

Microsoft Security

DevOps threat matrix

April 6, 2023 0 Comments cybersecurity, Microsoft, Microsoft security intelligence, Security

Credit to Author: Microsoft Security Threat Intelligence| Date: Thu, 06 Apr 2023 17:00:00 +0000

In this blog, we discuss threats we face in our DevOps environment, introducing our new threat matrix for DevOps. Using this matrix, we show the different techniques an adversary might use to attack an organization from the initial access phase and forward.

The post DevOps threat matrix appeared first on Microsoft Security Blog.

Microsoft Security

Secure hybrid and remote workplaces with a Zero Trust approach

April 6, 2023 0 Comments cybersecurity, Identity and access management, identity and access management series, Zero Trust

Credit to Author: Christine Barrett| Date: Thu, 06 Apr 2023 16:00:00 +0000

Secure your organization’s digital estate through a comprehensive Zero Trust approach.

The post Secure hybrid and remote workplaces with a Zero Trust approach appeared first on Microsoft Security Blog.

Microsoft Security

Discover a new era of security with Microsoft at RSAC 2023

April 5, 2023 0 Comments cybersecurity

Credit to Author: Christine Barrett| Date: Tue, 04 Apr 2023 16:00:00 +0000

Microsoft Security will be at the 2023 RSA Conference and we’d love to connect with you there. In this blog post, we share all the ways you can—plus, attend the Pre-Day with Microsoft and watch the Microsoft Security Copilot demo.

The post Discover a new era of security with Microsoft at RSAC 2023 appeared first on Microsoft Security Blog.

Microsoft Security

Discover a new era of security with Microsoft at RSA 2023

April 4, 2023 0 Comments cybersecurity

Credit to Author: Christine Barrett| Date: Tue, 04 Apr 2023 16:00:00 +0000

The post Discover a new era of security with Microsoft at RSA 2023 appeared first on Microsoft Security Blog.

Microsoft Security

Latest Microsoft Entra advancements strengthen identity security

March 30, 2023 0 Comments cybersecurity

Credit to Author: Christine Barrett| Date: Thu, 30 Mar 2023 16:00:00 +0000

Good permissions governance and protecting against identity compromise are essential strategies for keeping your people and resources safe. Learn how the new features in Microsoft Entra can support your identity strategy.

The post Latest Microsoft Entra advancements strengthen identity security appeared first on Microsoft Security Blog.

Microsoft Security

Microsoft Secure: Explore innovations transforming the future of security

March 28, 2023 0 Comments AI, AI and machine learning, cybersecurity, data protection, Identity and access management, identity and access management series

Credit to Author: Christine Barrett| Date: Tue, 28 Mar 2023 15:30:00 +0000

Microsoft Secure kicks off today with on-demand content available to those who register. We’ll share major innovations in AI, identity, and data protection to create a safer world for all.

The post Microsoft Secure: Explore innovations transforming the future of security appeared first on Microsoft Security Blog.

Microsoft Security

Microsoft Incident Response Retainer is generally available

March 27, 2023 0 Comments cybersecurity, microsoft security experts

Credit to Author: Christine Barrett| Date: Mon, 27 Mar 2023 22:00:00 +0000

Microsoft Security is expanding its incident response presence and we’re excited to announce the Microsoft Incident Response Retainer is now generally available.

The post Microsoft Incident Response Retainer is generally available appeared first on Microsoft Security Blog.