Security Response – Computer Security Articles

Experts on demand: Your direct line to Microsoft security insight, guidance, and expertise

October 28, 2019 admin cybersecurity, experts on demand, Microsoft Defender ATP, Microsoft security intelligence, microsoft threat experts, Security Intelligence, Security Response, targeted attack notifications, Threat protection, Windows Security

Credit to Author: Eric Avena| Date: Mon, 28 Oct 2019 15:00:10 +0000

Experts on demand is now generally available and gives customers direct access to real-life Microsoft threat analysts to help with their security investigations.

The post Experts on demand: Your direct line to Microsoft security insight, guidance, and expertise appeared first on Microsoft Security .

Microsoft Security

A case study in industry collaboration: Poisoned RDP vulnerability disclosure and response

August 7, 2019 admin CVE-2019-0887, cybersecurity, Endpoint security, Event Tracing for Windows (ETW), exploit, Microsoft Defender Advanced Threat Protection, Microsoft security intelligence, Remote Desktop Protocol (RDP), Security Response, Vulnerability, Windows Security

Credit to Author: Eric Avena| Date: Wed, 07 Aug 2019 23:50:25 +0000

Through a cross-company, cross-continent collaboration, we discovered a vulnerability, secured customers, and developed fix, all while learning important lessons that we can share with the industry.

The post A case study in industry collaboration: Poisoned RDP vulnerability disclosure and response appeared first on Microsoft Security .

Microsoft Security

Analysis of cyberattack on U.S. think tanks, non-profits, public sector by unidentified attackers

December 3, 2018 admin APT29, CozyBear, cybersecurity, Defending Democracy Program, Micorosoft AccountGuard, Microsoft Threat Protection, Office 365 ATP, Security Intelligence, Security Response, Windows Defender ATP, YTTRIUM

Credit to Author: Windows Defender ATP| Date: Mon, 03 Dec 2018 16:00:10 +0000

Reuters recently reported a hacking campaign focused on a wide range of targets across the globe. In the days leading to the Reuters publication, Microsoft researchers were closely tracking the same campaign. Our sensors revealed that the campaign primarily targeted public sector institutions and non-governmental organizations like think tanks and research centers, but also included

The post Analysis of cyberattack on U.S. think tanks, non-profits, public sector by unidentified attackers appeared first on Microsoft Secure.

Microsoft Security

Making it real—harnessing data gravity to build the next gen SOC

October 15, 2018 admin cybersecurity, Security Response

Credit to Author: toddvanderark| Date: Mon, 15 Oct 2018 16:00:38 +0000

In this post we address the question: “How do we make data gravity a reality in the security operations center (SOC) while we are under increased and constant pressure from motivated threat actors?”

The post Making it real—harnessing data gravity to build the next gen SOC appeared first on Microsoft Secure.

Microsoft Security

Small businesses targeted by highly localized Ursnif campaign

September 6, 2018 admin cybersecurity, Security Intelligence, Security Response

Credit to Author: Windows Defender ATP| Date: Thu, 06 Sep 2018 18:00:09 +0000

Cyber thieves are continuously looking for new ways to get people to click on a bad link, open a malicious file, or install a poisoned update in order to steal valuable data. In the past, they cast as wide a net as possible to increase the pool of potential victims. But attacks that create a

Microsoft Security

Attack inception: Compromised supply chain within a supply chain poses new risks

July 26, 2018 admin coin miner, cryptocurrency mining, cybersecurity, in-browser cryptocurrency miner, Security Intelligence, Security Response, software supply chain, supply chain attack, windows, Windows 10, Windows 10 in S mode, Windows 10 S, Windows Defender Antivirus, Windows Defender Application Control, Windows Defender ATP, Windows Defender AV

Credit to Author: Windows Defender ATP| Date: Thu, 26 Jul 2018 13:00:13 +0000

A new software supply chain attack unearthed by Windows Defender Advanced Threat Protection (Windows Defender ATP) emerged as an unusual multi-tier case. Unknown attackers compromised the shared infrastructure in place between the vendor of a PDF editor application and one of its software vendor partners, making the apps legitimate installer the unsuspecting carrier of a

Microsoft Security

Machine learning vs. social engineering

July 8, 2018 admin antispam, Artificial Intelligence, cybersecurity, fileless malware, JavaScript, machine learning, macro malware, macros, malware, Next-gen antivirus, non-PE threats, phishing, phishing attacks, Security Intelligence, Security Response, Social engineering, VBScript, windows, Windows 10, Windows 10 S, Windows Defender Antivirus, Windows Defender ATP, Windows Defender AV

Credit to Author: Windows Defender ATP| Date: Thu, 07 Jun 2018 13:00:56 +0000

Machine learning is a key driver in the constant evolution of security technologies at Microsoft. Machine learning allows Microsoft 365 to scale next-gen protection capabilities and enhance cloud-based, real-time blocking of new and unknown threats. Just in the last few months, machine learning has helped us to protect hundreds of thousands of customers against ransomware,

Microsoft Security

Taking apart a double zero-day sample discovered in joint hunt with ESET

July 2, 2018 admin CVE-2018-4990, CVE-2018-8120, cybersecurity, exploit, Security Intelligence, Security Response

Credit to Author: Windows Defender ATP| Date: Mon, 02 Jul 2018 15:00:00 +0000

In late March 2018, I analyzed an interesting PDF sample found by ESET senior malware researcher Anton Cherpanov. The sample was initially reported to Microsoft as a potential exploit for an unknown Windows kernel vulnerability. During my investigation in parallel with ESET researchers, I was surprised to discover two new zero-day exploits in the same

← Previous