North American Electric Reliability Corporation—Critical Infrastructure Protection (NERC CIP) Compliance options in Azure public cloud and Azure Government.
The post NERC CIP Compliance in Azure vs. Azure Government cloud appeared first on Microsoft Security. READ MORE HERE…
A collaboration between data science and security produced a machine learning model that accurately identifies and classifies security bugs based solely on report names.
The post Secure the software development lifecycle with machine learning appeared first on Microsoft Security. READ MORE HERE…
Our threat intelligence shows that COVID-19 themed threats are retreads of existing attacks that have been slightly altered to tie to the pandemic. We’re seeing a changing of lures, not a surge in attacks. These attacks are settling into the normal ebb and flow of the threat environment.
The post Microsoft shares new threat intelligence, security guidance during global crisis appeared first on Microsoft Security. READ MORE HERE…
While Kubernetes has many advantages, it also brings new security challenges that should be considered. Therefore, it is crucial to understand the various security risks that exist in containerized environments, and specifically in Kubernetes.
The post Attack matrix for Kubernetes appeared first on Microsoft Security. READ MORE HERE…
Microsoft identified several dozens of hospitals with vulnerable gateway and VPN appliances. We sent these hospitals a first-of-its-kind notification with important info about the vulnerabilities, how attackers can take advantage of them, and a strong recommendation to apply security updates.
The post Microsoft works with healthcare organizations to protect from popular ransomware during COVID-19 crisis: Here’s what to do appeared first on Microsoft Security. READ MORE HERE…
If you don’t have enough diversity on your cybersecurity team, it may be because you aren’t looking in the right places.
The post Welcoming a more diverse workforce into cybersecurity: expanding the pipeline appeared first on Microsoft Security. READ MORE HERE…
Do you have the right practices in place to retain and grow the cybersecurity women who already work at your company?
The post Welcoming and retaining diversity in cybersecurity appeared first on Microsoft Security. READ MORE HERE…
Astaroth is back sporting significant changes. The updated attack chain maintains Astaroth’s complex, multi-component nature and continues its pattern of detection evasion.
The post Latest Astaroth living-off-the-land attacks are even more invisible but not less observable appeared first on Microsoft Security. READ MORE HERE…
I’ve long been a proponent to challenging traditional schools of thought—traditional cyber-norms—and encouraging our industry to get outside its comfort zones.
The post Welcoming more women into cybersecurity: the power of mentorships appeared first on Microsoft Security. READ MORE HERE…
Secured-core PCs combine virtualization, operating system, and hardware and firmware protection. Along with Microsoft Defender ATP, Secured-core PCs provide end-to-end protection against advanced attacks that leverage driver vulnerabilities to gain kernel privileges.
The post Secured-core PCs: A brief showcase of chip-to-cloud security against kernel attacks appeared first on Microsoft Security. READ MORE HERE…