cybersecurity

MicrosoftSecurity

How a leading Microsoft engineer extends culture to service resiliency

Credit to Author: Emma Jones| Date: Wed, 23 Mar 2022 16:00:00 +0000

Nadim Abdo, Corporate Vice President of Identity and Network Access Engineering, talks with principal software engineering manager, Huiwen Ru, on her groundbreaking work to make cloud services resilient.

The post How a leading Microsoft engineer extends culture to service resiliency appeared first on Microsoft Security Blog.

Read More
MicrosoftSecurity

DEV-0537 criminal actor targeting organizations for data exfiltration and destruction

Credit to Author: Katie McCafferty| Date: Tue, 22 Mar 2022 22:02:50 +0000

The activity we have observed has been attributed to a threat group that Microsoft tracks as DEV-0537, also known as LAPSUS$. DEV-0537 is known for using a pure extortion and destruction model without deploying ransomware payloads.

The post DEV-0537 criminal actor targeting organizations for data exfiltration and destruction appeared first on Microsoft Security Blog.

Read More
MicrosoftSecurity

Manage subject rights requests at scale with Microsoft Priva

Credit to Author: Lauren Goodwin| Date: Wed, 16 Mar 2022 16:00:00 +0000

Having the right technology and processes in place can make it possible to manage a large volume of SRRs efficiently and auditable. This post discusses SRR response use cases and how Microsoft Priva subject rights requests can be used for this purpose.

The post Manage subject rights requests at scale with Microsoft Priva appeared first on Microsoft Security Blog.

Read More
MicrosoftSecurity

Uncovering Trickbot’s use of IoT devices in command-and-control infrastructure

Credit to Author: Microsoft 365 Defender Threat Intelligence Team| Date: Wed, 16 Mar 2022 15:00:00 +0000

The Microsoft Defender for IoT research team has recently discovered the exact method through which MikroTik devices are used in Trickbot’s C2 infrastructure. In this blog, we share the analysis of this method and provide insights on how attackers gain access and how they use compromised IoT devices in Trickbot attacks.

The post Uncovering Trickbot’s use of IoT devices in command-and-control infrastructure appeared first on Microsoft Security Blog.

Read More