AI jailbreaks: What they are and how they can be mitigated

Credit to Author: Microsoft Threat Intelligence| Date: Tue, 04 Jun 2024 17:00:00 +0000

Microsoft security researchers, in partnership with other security experts, continue to proactively explore and discover new types of AI model and system vulnerabilities. In this post we are providing information about AI jailbreaks, a family of vulnerabilities that can occur when the defenses implemented to protect AI from producing harmful content fails. This article will be a useful reference for future announcements of new jailbreak techniques.

The post AI jailbreaks: What they are and how they can be mitigated appeared first on Microsoft Security Blog.

Read more

Microsoft is named a leader in the Forrester Wave for XDR

Credit to Author: Rob Lefferts| Date: Mon, 03 Jun 2024 16:00:00 +0000

​Microsoft has been named a leader in The Forrester Wave™: Extended Detection and Response (XDR) platforms, Q2, 2024, and received the highest scores in both strategy and current offering categories, as well as in the market presence category.

The post Microsoft is named a leader in the Forrester Wave for XDR appeared first on Microsoft Security Blog.

Read more

Microsoft is again named the overall leader in the Forrester Wave for XDR

Credit to Author: Rob Lefferts| Date: Mon, 03 Jun 2024 16:00:00 +0000

​Microsoft has been named a leader in The Forrester Wave™: Extended Detection and Response (XDR) platforms, Q2, 2024, and received the highest scores in both strategy and current offering categories, as well as in the market presence category.

The post Microsoft is again named the overall leader in the Forrester Wave for XDR appeared first on Microsoft Security Blog.

Read more

Exposed and vulnerable: Recent attacks highlight critical need to protect internet-exposed OT devices

Credit to Author: Microsoft Threat Intelligence| Date: Thu, 30 May 2024 17:00:00 +0000

Since late 2023, Microsoft has observed an increase in reports of attacks focusing on internet-exposed, poorly secured operational technology (OT) devices. Internet-exposed OT equipment in water and wastewater systems (WWS) in the US were targeted in multiple attacks over the past months by different nation-backed actors, including attacks by IRGC-affiliated “CyberAv3ngers” in November 2023, as […]

The post Exposed and vulnerable: Recent attacks highlight critical need to protect internet-exposed OT devices appeared first on Microsoft Security Blog.

Read more

6 insights from Microsoft’s 2024 state of multicloud risk report to evolve your security strategy

Credit to Author: Andrew Conway| Date: Wed, 29 May 2024 16:00:00 +0000

Discover the top multicloud security risks across DevOps, runtime environments, identity and access, and data in this new report from Microsoft.

The post 6 insights from Microsoft’s 2024 state of multicloud risk report to evolve your security strategy appeared first on Microsoft Security Blog.

Read more

Moonstone Sleet emerges as new North Korean threat actor with new bag of tricks

Credit to Author: Microsoft Threat Intelligence| Date: Tue, 28 May 2024 16:00:00 +0000

Microsoft has identified a new North Korean threat actor, now tracked as Moonstone Sleet (formerly Storm-1789), that combines many tried-and-true techniques used by other North Korean threat actors, as well as unique attack methodologies to target companies for its financial and cyberespionage objectives.

The post Moonstone Sleet emerges as new North Korean threat actor with new bag of tricks appeared first on Microsoft Security Blog.

Read more

Cyber Signals: Inside the growing risk of gift card fraud

Credit to Author: Vasu Jakkal| Date: Thu, 23 May 2024 13:00:00 +0000

In the ever-evolving landscape of cyberthreats, staying ahead of malicious actors is a constant challenge. The latest edition of Cyber Signals dives deep into the world of Storm-0539, also known as Atlas Lion, shedding light on their sophisticated methods of gift and payment card theft.

The post Cyber Signals: Inside the growing risk of gift card fraud appeared first on Microsoft Security Blog.

Read more

New Windows 11 features strengthen security to address evolving cyberthreat landscape

Credit to Author: David Weston| Date: Mon, 20 May 2024 18:00:00 +0000

Today, ahead of the Microsoft Build 2024 conference, we announced a new class of Windows computers, Copilot+ PC. Alongside this exciting new class of computers, we are introducing important security features and updates that make Windows 11 more secure for users and organizations, and give developers the tools to prioritize security.

The post New Windows 11 features strengthen security to address evolving cyberthreat landscape appeared first on Microsoft Security Blog.

Read more

Threat actors misusing Quick Assist in social engineering attacks leading to ransomware

Credit to Author: Microsoft Threat Intelligence| Date: Wed, 15 May 2024 16:00:00 +0000

Microsoft Threat Intelligence has observed Storm-1811 misusing the client management tool Quick Assist to target users in social engineering attacks that lead to malware like Qakbot followed by Black Basta ransomware deployment.

The post Threat actors misusing Quick Assist in social engineering attacks leading to ransomware appeared first on Microsoft Security Blog.

Read more