Month: January 2018

MicrosoftSecurity

How to disrupt attacks caused by social engineering

Credit to Author: Microsoft Secure Blog Staff| Date: Wed, 10 Jan 2018 17:00:03 +0000

This post is authored by Milad Aslaner, Senior Program Manager, Windows & Devices Group. A decade ago, most cyber-attacks started with a piece of malware or a complex method to directly attack the infrastructure of a company. But this picture has changed and today all it takes is a sophisticated e-mail phishing for an identity.

Read more

Read More
MicrosoftSecurity

A worthy upgrade: Next-gen security on Windows 10 proves resilient against ransomware outbreaks in 2017

Credit to Author: Windows Defender ATP| Date: Wed, 10 Jan 2018 14:00:31 +0000

Adopting reliable attack methods and techniques borrowed from more evolved threat types, ransomware attained new levels of reach and damage in 2017. The following trends characterize the ransomware narrative in the past year: Three global outbreaks showed the force of ransomware in making real-world impact, affecting corporate networks and bringing down critical services like hospitals,

Read more

Read More
MicrosoftSecurity

Understanding the performance impact of Spectre and Meltdown mitigations on Windows Systems

Credit to Author: Jenny Erie| Date: Tue, 09 Jan 2018 17:00:46 +0000

Last week the technology industry and many of our customers learned of new vulnerabilities in the hardware chips that power phones, PCs and servers. We (and others in the industry) had learned of this vulnerability under nondisclosure agreement several months ago and immediately began developing engineering mitigations and updating our cloud infrastructure. In this blog,

Read more

Read More
MicrosoftSecurity

Application fuzzing in the era of Machine Learning and AI

Credit to Author: Jenny Erie| Date: Wed, 03 Jan 2018 17:00:15 +0000

Proactively testing software for bugs is not new. The earliest examples date back to the 1950s with the term fuzzing. Fuzzing as we now refer to it is the injection of random inputs and commands into applications. It made its debut quite literally on a dark and stormy night in 1988. Since then, application fuzzing

Read more

Read More
MicrosoftSecurity

How Microsoft tools and partners support GDPR compliance

Credit to Author: Microsoft Secure Blog Staff| Date: Tue, 19 Dec 2017 17:00:47 +0000

This post is authored by Daniel Grabski,Executive Security Advisor, Microsoft Enterprise Cybersecurity Group. As an Executive Security Advisor for enterprises in Europe and the Middle East, I regularly engage with Chief Information Security Officers (CISOs), Chief Information Officers (CIOs) and Data Protection Officers (DPOs) to discuss their thoughts and concerns regarding the General Data Protection

Read more

Read More
MicrosoftSecurity

How public-private partnerships can combat cyber adversaries

Credit to Author: Jenny Erie| Date: Wed, 13 Dec 2017 17:00:46 +0000

For several years now, policymakers and practitioners from governments, CERTs, and the security industry have been speaking about the importance of public-private partnerships as an essential part of combating cyber threats. It is impossible to attend a security conference without a keynote presenter talking about it. In fact, these conferences increasingly include sessions or entire

Read more

Read More
MicrosoftSecurity

Detonating a bad rabbit: Windows Defender Antivirus and layered machine learning defenses

Credit to Author: Windows Defender ATP| Date: Mon, 11 Dec 2017 13:58:06 +0000

Windows Defender Antivirus uses a layered approach to protection: tiers of advanced automation and machine learning models evaluate files in order to reach a verdict on suspected malware. While Windows Defender AV detects a vast majority of new malware files at first sight, we always strive to further close the gap between malware release and

Read more

Read More
MicrosoftSecurity

Microsoft teams up with law enforcement and other partners to disrupt Gamarue (Andromeda)

Credit to Author: Windows Defender ATP| Date: Mon, 04 Dec 2017 23:06:44 +0000

Today, with help from Microsoft security researchers, law enforcement agencies around the globe, in cooperation with Microsoft Digital Crimes Unit (DCU), announced the disruption of Gamarue, a widely distributed malware that has been used in networks of infected computers collectively called the Andromeda botnet. The disruption is the culmination of a journey that started in

Read more

Read More