Security


Microsoft Highlights Certificate-Based Authentication and FIDO2 Security Advances

Microsoft cited progress on enabling phishing-resistant authentications for organizations, in a Friday announcement.

Microsoft Finishes 2023 with 34 Security Fixes

Microsoft's final security update of the year has arrived, packed with 34 vulnerability fixes for a range of issues from remote code execution (RCE) bugs to information disclosure and denial of service vulnerabilities.

AI Safety Initiative Formed by the Cloud Security Alliance

The AI Safety Initiative was announced on Tuesday by the Cloud Security Alliance, with Amazon, Anthropic, Google, Microsoft and OpenAI joining as partners.

Microsoft Lays Out Identity and Access Best Practices for IT Pros

The Microsoft Incident Response team this month published a fairly comprehensive guide for IT pros responsible for securing computing environments.

Microsoft Announces Paid Extended Security Support for Windows 10

Microsoft this week announced a lifeline for those who will not be ready to transition from Windows 10 to Windows 11 by the OS's end of support on Oct. 14, 2025.

Windows Server vNext To Bring Hotpatching for All and Other Perks

Microsoft will be bringing a bunch of improvements to Windows Server in its "vNext" release, per a November Microsoft Ignite presentation.

AI 'Secure by Default' Agreement Signed by 18 Countries

Government bodies from 18 countries, including the U.S., have agreed to AI security guidelines developed by the U.K.

Creating a Safe Links Policy for Your Organization

Keep your users safe by taking advantage of this Microsoft 365 security feature.

Microsoft Targets 5 Zero-Day Flaws in November Security Patch

The second Tuesday of the month is here, and with that comes the arrival of Microsoft's cumulative security update for November, packed with fixes for a modest 63 flaws.

Gray Fence Graphic

Why IT Should be Concerned with 'Living off the Land' Attacks

What was once a somewhat novel attack approach has gained popularity in the face of rising nation-state threat actors.

Microsoft Says Prep Now for Quantum Computing Enabled Attacks

Organizations can prepare today for future attacks that could be enabled by breakthroughs in quantum computing, Microsoft suggested, in a Nov. 1 post.

Doorway

Microsoft Secure Future Initiative Aims To Address Cybersecurity Problems

Microsoft on Thursday announced a Secure Future Initiative (SFI) approach to dealing with cybersecurity threats.

A New Feature that Office Desktop Applications Need Now!

Microsoft could further give users a piece of mind by adding a security focused Role Based Access Control to its productivity suite.

40 Countries Vow Not to Pay Ransomware Hackers

In a gathering of 48 countries for the third annual International Counter Ransomware Initiative summit, the U.S. and allies are pledging to not pay ransomware attacks leveraged against their individual countries.

SEC Sues SolarWinds for Misleading Investors on Product Risks

The U.S. Securities and Exchange Commission announced a lawsuit on Monday against SolarWinds Corp. for alleged "fraud and internal control failures" regarding its software security practices, which misled investors.

CISA Offers Free 'Logging Made Easy' Tool for Diagnosing Threats

The U.S. Cybersecurity and Infrastructure Security Agency this week introduced Logging Made Easy version 1.0.

Microsoft Rolls Out Passwordless Policy for Entra ID-Joined Windows 11 Devices

Microsoft suggested this week that organizations with Entra ID-joined Windows 11 devices can now switch them over to passwordless authentications using a new policy option.

Microsoft Purview Audit Standard Perks May Not Arrive Until 2024

Microsoft offered a few more details about its plans to expand audit logging and data retention periods for Microsoft Purview Audit Standard users.

Windows LAPS Bolstered with Entra ID and Intune Support

Microsoft has updated its Windows Local Administrator Password solution by adding support for Microsoft Entra ID and Microsoft Intune.

Microsoft Promises Better Tracking with Intune and Security Copilot

Microsoft Intune with a coming Microsoft Security Copilot artificial intelligence integration will help organizations better track security issues at the device and user level, according to a Thursday Microsoft announcement.

Subscribe on YouTube