This month also features two zero-day fixes for Word and Microsoft Streaming Service.
John O'Neill, Sr. stresses the importance of staying up to date with an ever-changing enterprise security landscape.
A black market called "W3LL Store" provided threat actors with all the tools they needed to pull off targeted attacks.
This month, I chatted with Yubico experts Erik Parkkonen, solutions architect, and Derek Hanson, vice president of standards and alliances, on the passwordless goal for organizations and where we are at this point.
Microsoft Defender for Identity now has a new sensor to further detect certificate abuses by attackers, per a Wednesday announcement.
When attackers strike and operations suffer, good CyberInsurance may make the difference between a few stressful days, or catastrophic monetary losses.
Microsoft this week announced multiple improvements across its enterprise-grade security products.
In the wake of last month's massive security update, Microsoft has released a smaller number of fixes for August.
Microsoft Edge for Business will be arriving during the week of Aug. 17, Microsoft announced on Friday.
Microsoft on Friday announced that it had fixed security issues with "Power Platform Custom Connectors using Custom Code" that had been identified by security solutions firm Tenable back in March 2023.
The U.S. Cybersecurity and Infrastructure Security Agency on Friday announced the publication of its "Strategic Plan" for the next three years.
Microsoft gave public notice this week that boot attestation reporting for Windows 11 clients is getting switched to the Microsoft Azure Attestation service, "starting in mid-August 2023."
Tenable CEO Amit Yoran argues that Microsoft's handling of security vulnerabilities is far from adequate in keeping the public safe.
Microsoft on Tuesday announced plans to disable the use of the Transport Layer Security 1.0 and TLS 1.1 security protocols in Windows.
The Biden-Harris administration on Monday announced a new National Cyber Workforce and Education Strategy.
Microsoft on Friday announced a preview of a continuous access evaluation setting for the Entra ID Conditional Access service that will let organizations strictly enforce location polices for network access.
Microsoft announced on Wednesday that firmware security advisories are now available within the Microsoft Defender Vulnerability Management service.
Microsoft Defender for IoT now has a firmware analysis capability that's at the preview stage, per a Microsoft announcement this week.
Microsoft last week announced that it is expanding some baseline security aspects for its cloud-based services in response to "nation-state cyberthreats" as part of a communication with the U.S. government's Cybersecurity and Infrastructure Security Agency.
Microsoft partners Rubrik and Veeam Software announced during this week's Microsoft Inspire conference that their solutions now have integrations with Microsoft 365 Backup.