cybersecurity – Page 37 – Computer Security Articles

Credit to Author: Christine Barrett| Date: Thu, 02 Jun 2022 10:00:00 +0000

In the spirit of the executive order and as part of our commitment to enhancing cybersecurity across the US, we today announce that Tenable has expanded its collaboration with the Microsoft Intelligent Security Association (MISA). Together, Microsoft and Tenable will help enhance the US government’s ability to quickly identify, investigate, prioritize, and remediate threats—and help collectively raise the country’s security posture.

The post Microsoft collaborates with Tenable to support federal cybersecurity efforts appeared first on Microsoft Security Blog.

Microsoft Security

June 1, 2022 admin

Using Python to unearth a goldmine of threat intelligence from leaked chat logs

Credit to Author: Paul Oliveria| Date: Wed, 01 Jun 2022 18:00:00 +0000

Dealing with a great amount of data can be time consuming, thus using Python can be very powerful to help analysts sort information and extract the most relevant data for their investigation. The open-source tools library, MSTICpy, for example, is a Python tool dedicated to threat intelligence. It aims to help threat analysts acquire, enrich, analyze, and visualize data.

The post Using Python to unearth a goldmine of threat intelligence from leaked chat logs appeared first on Microsoft Security Blog.

Microsoft Security

May 31, 2022 admin

Streamlining employee onboarding: Microsoft’s response to the Great Reshuffle

Credit to Author: Emma Jones| Date: Tue, 31 May 2022 13:00:00 +0000

Verifiable credentials may help improve employee experience, an important factor HR and IT business leaders must pay attention to as expectations evolve.

The post Streamlining employee onboarding: Microsoft’s response to the Great Reshuffle appeared first on Microsoft Security Blog.

Microsoft Security

May 31, 2022 admin

Secure access for a connected world—meet Microsoft Entra

Credit to Author: Emma Jones| Date: Tue, 31 May 2022 13:00:00 +0000

Identity is not just about directories, and access is not just about the network. Security challenges have become much broader, so we need broader solutions. We need to secure access for every customer, partner, and employee—and for every microservice, sensor, network, device, and database.

The post Secure access for a connected world—meet Microsoft Entra appeared first on Microsoft Security Blog.

ScadaICS Schneider

May 28, 2022 admin

Engineering simulation and success in IoT product design

Credit to Author: Employee Voices| Date: Mon, 23 May 2022 21:23:19 +0000

Authored by Raghu (Jayaraman) Raghuraman, Senior Vice President, Digital Engineering & Technical Debt at Schneider Electric. It takes time, precision, and dedication to create a reliable and robust IoT solution… Read more »

The post Engineering simulation and success in IoT product design appeared first on Schneider Electric Blog.

Microsoft Security

May 28, 2022 admin

Android apps with millions of downloads exposed to high-severity vulnerabilities

Credit to Author: Katie McCafferty| Date: Fri, 27 May 2022 16:00:00 +0000

Microsoft uncovered high-severity vulnerabilities in a mobile framework used by multiple large mobile service providers in pre-installed Android System apps that potentially exposed users to remote or local attacks.

The post Android apps with millions of downloads exposed to high-severity vulnerabilities appeared first on Microsoft Security Blog.

Microsoft Security

May 28, 2022 admin

Detecting and preventing privilege escalation attacks leveraging Kerberos relaying (KrbRelayUp)

Credit to Author: Microsoft 365 Defender Threat Intelligence Team| Date: Wed, 25 May 2022 21:00:00 +0000

The privilege escalation hacking tool KrbRelayUp is a wrapper that can streamline the use of some features in Rubeus, KrbRelay, SCMUACBypass, PowerMad/ SharpMad, Whisker, and ADCSPwn tools in attacks. Although this attack won’t function for Azure Active Directory (Azure AD) joined devices, hybrid joined devices with on-premises domain controllers remain vulnerable.

The post Detecting and preventing privilege escalation attacks leveraging Kerberos relaying (KrbRelayUp) appeared first on Microsoft Security Blog.

Microsoft Security

May 28, 2022 admin

Anatomy of a DDoS amplification attack

Credit to Author: Microsoft 365 Defender Threat Intelligence Team| Date: Mon, 23 May 2022 18:00:00 +0000

Amplification attacks are one of the most common distributed denial of service (DDoS) attack vectors. These attacks are typically categorized as flooding or volumetric attacks, where the attacker succeeds in generating more traffic than the target can process, resulting in exhausting its resources due to the amount of traffic it receives.

The post Anatomy of a DDoS amplification attack appeared first on Microsoft Security Blog.