Toll fraud malware: How an Android application can drain your wallet

Credit to Author: Microsoft 365 Defender Threat Intelligence Team| Date: Thu, 30 Jun 2022 14:00:00 +0000

Toll fraud malware, a subcategory of billing fraud in which malicious applications subscribe users to premium services without their knowledge or consent, is one of the most prevalent types of Android malware – and it continues to evolve.

The post Toll fraud malware: How an Android application can drain your wallet appeared first on Microsoft Security Blog.

Read more

Using process creation properties to catch evasion techniques

Credit to Author: Microsoft 365 Defender Threat Intelligence Team| Date: Thu, 30 Jun 2022 13:30:00 +0000

We developed a robust detection method in Microsoft Defender for Endpoint that can catch known and unknown variations of a process execution class used by attackers to evade detection. This class of stealthy execution techniques include process doppelganging, process herpadering, and process ghosting.

The post Using process creation properties to catch evasion techniques appeared first on Microsoft Security Blog.

Read more

Microsoft at RSA 2022: Envisioning the future of security

Credit to Author: Emma Jones| Date: Wed, 29 Jun 2022 16:00:00 +0000

The 2022 RSA Conference was a great success, drawing 26,000 attendees to three days of cutting-edge security sessions, tutorials, seminars, and special events at Moscone Center in San Francisco. Microsoft Security was on the ground, interacting with customers and security professionals at Microsoft’s 20-plus earned sessions, as well as showcasing new solutions like Microsoft Entra that help realize our goal of comprehensive security.

The post Microsoft at RSA 2022: Envisioning the future of security appeared first on Microsoft Security Blog.

Read more

4 breakthrough ideas for compliance and data security

Credit to Author: Christine Barrett| Date: Mon, 27 Jun 2022 16:00:00 +0000

Learn how Zero Trust and other data protection strategies can help you overcome four key challenges in compliance management and data governance.

The post 4 breakthrough ideas for compliance and data security appeared first on Microsoft Security Blog.

Read more

Detecting malicious key extractions by compromised identities for Azure Cosmos DB

Credit to Author: Christine Barrett| Date: Thu, 23 Jun 2022 16:00:00 +0000

Azure Cosmos DB is a fully managed NoSQL cloud database service for modern app development. It offers a variety of advanced built-in features, such as automatic worldwide data replication, lightning-fast response types, and a variety of APIs. In this blog post, we describe security practices for securing access to Azure Cosmos DB and show how monitoring relevant control plane operations can help in the detection of potentially compromised authorization.

The post Detecting malicious key extractions by compromised identities for Azure Cosmos DB appeared first on Microsoft Security Blog.

Read more

Microsoft Defender for Office 365 receives highest award in SE Labs Enterprise Email Security Services test

Credit to Author: Christine Barrett| Date: Wed, 22 Jun 2022 16:00:00 +0000

Microsoft received an AAA Protection Award for Microsoft Defender for Office 365, the highest possible award that vendors can achieve in this test.

The post Microsoft Defender for Office 365 receives highest award in SE Labs Enterprise Email Security Services test appeared first on Microsoft Security Blog.

Read more

Improving AI-based defenses to disrupt human-operated ransomware

Credit to Author: Paul Oliveria| Date: Tue, 21 Jun 2022 16:00:00 +0000

To disrupt human-operated ransomware attacks as early as possible, we enhanced the AI-based protections in Microsoft Defender for Endpoint with a range of specialized machine learning techniques that swiftly identify and block malicious files, processes, or behavior observed during active attacks.

The post Improving AI-based defenses to disrupt human-operated ransomware appeared first on Microsoft Security Blog.

Read more

Securing your IoT with Edge Secured-core devices

Credit to Author: Christine Barrett| Date: Tue, 21 Jun 2022 06:00:00 +0000

To simplify your IoT security journey, today, we’re announcing the availability of Windows IoT Edge Secured-core devices available in the Azure Certified Device catalog from Lenovo, ASUS and AAEON, additionally we’re also announcing the availability of devices that meet the Microsoft sponsored Edge Compute Node protection profile which is governed with industry oversight, from Scalys and Eurotech. And learn more on Microsoft’s investments in MCU security.

The post Securing your IoT with Edge Secured-core devices appeared first on Microsoft Security Blog.

Read more

How one Microsoft software engineer works to improve access management

Credit to Author: Christine Barrett| Date: Mon, 20 Jun 2022 16:00:00 +0000

Igor Sakhnov, corporate vice president of Identity and Network Access Engineering, talks with software engineer Rebecca Nzioki about her journey to computer science and Microsoft’s Africa Development Center in Kenya.

The post How one Microsoft software engineer works to improve access management appeared first on Microsoft Security Blog.

Read more