-
Microsoft announced a lot of Azure SQL news at Ignite this month, but few as critical to application development security than the public preview of Always Encrypted with secure enclaves. Here's how to get started with this new feature.
03/15/2021
-
News
Exchange Servers are getting attacked to install ransomware, dubbed "DearCry," Microsoft warned on Thursday.
03/12/2021
-
Another reason to patch early and patch often: The Exchange Server zero-day vulnerabilities Microsoft first disclosed earlier this month are now being used in ransomware.
03/12/2021
-
News
The U.S. Cybersecurity and Infrastructure Security Agency and the Federal Bureau of Investigation announced a Microsoft Exchange Server joint advisory that offers consolidated advice for Exchange Server users on detecting Hafnium attacks.
03/10/2021
-
News
Microsoft has released software security updates addressing 89 common vulnerabilities and exposures (CVEs), according to security researchers.
03/10/2021
-
Posey's Tips & Tricks
Those with a business or enterprise subscription to Microsoft 365 have the option to create a policy that will greatly reduce the chances of a user becoming infected from a malicious e-mail.
03/10/2021
-
News
Microsoft's Exchange team on Monday announced additional help for organizations having trouble trying to patch Exchange Server products quickly in response to the Hafnium attacks.
03/09/2021
-
News
Microsoft has updated its recommendations to organizations running Exchange Server, targeted in Hafnium nation-state attacks, by describing some new resources.
03/08/2021
-
Posey's Tips & Tricks
Microsoft's go-to solution for anti-phishing protection is an anti-phishing policy. Here's how to create one in Microsoft 365.
03/08/2021
-
News
Microsoft this week described "three new pieces" of malware that were used in the SolarWinds Orion espionage attacks dubbed "Solorigate," although Microsoft security researches are now calling it "Nobelium."
03/05/2021
-
Posey's Tips & Tricks
These are the top four privacy settings to check in your Windows device to make sure Microsoft doesn't collect any data you don't want it to.
03/03/2021
-
News
Microsoft on Tuesday released out-of-band security patches for Exchange Server to address multiple zero-day flaws that are currently being exploited in active attacks.
03/02/2021
-
Posey's Tips & Tricks
To audit all of the personal data that Microsoft has collected from your PC usage habits, look no further than Windows 10's Privacy Dashboard.
03/01/2021
-
News
Microsoft's Active Directory authentication solution got notably skewered during a Feb. 23 U.S. Senate hearing on the SolarWinds Orion software hack.
02/26/2021
-
News
Microsoft announced on Thursday that its CodeQL queries, which were used to detect possible compromise in its source code after the Solorigate attacks, are now publicly available at the GitHub repository.
02/25/2021
-
News
Microsoft last week announced plans to increase the price of "standalone" subscriptions to its Microsoft Intune and Microsoft Enterprise Mobility plus Security (EMS) products starting in July.
02/22/2021
-
News
Microsoft has reconfirmed that the "Solorigate" advanced persistent threat attackers saw some of its source code, although "only a few individual files were viewed."
02/22/2021
-
News
Microsoft this week announced advancements in two Azure services that are used to add security for applications and content that touch the Internet.
02/18/2021
-
News
Microsoft is planning to end the integration of the Microsoft Defender for Endpoint security solution with the Azure Information Protection service on March 29, 2021, according to a Wednesday announcement.
02/17/2021
-
News
Microsoft announced on Friday that its Azure Attestation service is now commercially released, or "generally available."
02/12/2021
-
News
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published advisory AA21-042A regarding the Feb. 5 electronic intrusion into a Florida water treatment facility by an unknown attacker.
02/12/2021
-
News
CISA issued a reminder on Wednesday that Microsoft is implementing a "domain controller enforcement" mode this month to address a "Critical"-rated Windows Netlogon vulnerability that was initially patched last August.
02/10/2021
-
News
The February patch tally includes 11 CVEs deemed "Critical," 43 CVEs considered "Important" and two CVEs assessed as "Moderate" in severity.
02/09/2021
-
Posey's Tips & Tricks
Ransomware is a lot more sophisticated now, attacking data on network drives and in the cloud. Before physically interacting with ransomware, take these precautions to stop anything outside the VM from getting infected.
02/09/2021
-
News
Microsoft this week explained that its non-Chromium-based Microsoft Edge browser (based on earlier EdgeHTML technology) will get removed when April "update Tuesday" security patches get applied to Windows 10 systems.
02/05/2021