The Wayback Machine - https://web.archive.org/web/20221212094229/https://www.microsoft.com/en-us/security/blog/
Skip to main content
Skip to main content
Microsoft Security
Sign in
• 6 min read

Simplify privacy protection with Microsoft Priva Subject Rights Requests

Read more Simplify privacy protection with Microsoft Priva Subject Rights Requests
Subscribe
a person sitting at a table using a laptop computer Featured image for Mitigate threats with the new threat matrix for Kubernetes
• 4 min read

Mitigate threats with the new threat matrix for Kubernetes

The updated threat matrix for Kubernetes comes in a new format that simplifies usage of the knowledge base and with new content to help mitigate threats.
Read more Mitigate threats with the new threat matrix for Kubernetes
a person sitting on a bench in front of a window Featured image for DEV-0139 launches targeted attacks against the cryptocurrency industry
• 17 min read

DEV-0139 launches targeted attacks against the cryptocurrency industry

Microsoft security researchers investigate an attack where the threat actor, tracked DEV-0139, used chat groups to target specific cryptocurrency investment companies and run a backdoor within their network.
Read more DEV-0139 launches targeted attacks against the cryptocurrency industry
Chief Information Officer working from home. Featured image for Implementing Zero Trust access to business data on BYOD with Trustd MTD and Microsoft Entra
• 3 min read

Implementing Zero Trust access to business data on BYOD with Trustd MTD and Microsoft Entra

Protect business data—and employee privacy—with conditional access on employees’ personal devices with Trustd MTD and Microsoft Entra.
Read more Implementing Zero Trust access to business data on BYOD with Trustd MTD and Microsoft Entra
Aerial view of the pentagon. Featured image for Microsoft supports the DoD’s Zero Trust strategy
• 5 min read

Microsoft supports the DoD’s Zero Trust strategy

The Department of Defense released its formal Zero Trust strategy, marking a major milestone in its goal of achieving enterprise-wide implementation by 2027.
Read more Microsoft supports the DoD’s Zero Trust strategy
a man and a woman standing in a room Featured image for Join us at InfoSec Jupyterthon 2022
• 1 min read

Join us at InfoSec Jupyterthon 2022

Join our community of analysts and engineers at the third annual InfoSec Jupyterthon 2022, an online event taking place on December 2 and 3, 2022.
Read more Join us at InfoSec Jupyterthon 2022
a person standing in front of a building Featured image for Vulnerable SDK components lead to supply chain risks in IoT and OT environments
• 6 min read

Vulnerable SDK components lead to supply chain risks in IoT and OT environments

As vulnerabilities in network components, architecture files, and developer tools have become an increasingly popular attack vector to leverage access into secure networks and devices, Microsoft identified such a vulnerable component and found evidence of a supply chain risk that might affect millions of organizations and devices.
Read more Vulnerable SDK components lead to supply chain risks in IoT and OT environments
a man standing in front of a computer Featured image for DEV-0569 finds new ways to deliver Royal ransomware, various payloads
• 7 min read

DEV-0569 finds new ways to deliver Royal ransomware, various payloads

DEV-0569’s recent activity shows their reliance on malvertising and phishing in delivering malicious payloads. The group’s changes and updates in delivery and payload led to distribution of info stealers and Royal ransomware.
Read more DEV-0569 finds new ways to deliver Royal ransomware, various payloads
Retail store manager using a tablet securely while working remote from a café. Featured image for Microsoft contributes S2C2F to OpenSSF to improve supply chain security
• 3 min read

Microsoft contributes S2C2F to OpenSSF to improve supply chain security

We are pleased to announce that the S2C2F has been adopted by the OpenSSF under the Supply Chain Integrity Working Group and formed into its own Special Initiative Group. Our peers at the OpenSSF and across the globe agree with Microsoft when it comes to how fundamental this work is to improving supply chain security for everyone.
Read more Microsoft contributes S2C2F to OpenSSF to improve supply chain security
Male developer coding in front of two monitors at desk in office. Programming code shown on both monitors. Featured image for Token tactics: How to prevent, detect, and respond to cloud token theft
• 9 min read

Token tactics: How to prevent, detect, and respond to cloud token theft

As organizations increase their coverage of multifactor authentication (MFA), threat actors have begun to move to more sophisticated techniques to allow them to compromise corporate resources without needing to satisfy MFA. Recently, the Microsoft Detection and Response Team (DART) has seen an increase in attackers utilizing token theft for this purpose.
Read more Token tactics: How to prevent, detect, and respond to cloud token theft
Female datacenter employee performs maintenance in datacenter cold aisle. Featured image for 2022 holiday DDoS protection guide
• 5 min read

2022 holiday DDoS protection guide

The holiday season is an exciting time for many people as they get to relax, connect with friends and family, and celebrate traditions. Organizations also have much to rejoice about during the holidays (for example, more sales for retailers and more players for gaming companies). Unfortunately, cyber attackers also look forward to this time of year to celebrate an emerging holiday tradition—distributed denial-of-service (DDoS) attacks.
Read more 2022 holiday DDoS protection guide
a man standing in front of a computer screen Featured image for Microsoft threat intelligence presented at CyberWarCon 2022 
• 5 min read

Microsoft threat intelligence presented at CyberWarCon 2022 

At CyberWarCon 2022, Microsoft and LinkedIn analysts presented several sessions detailing analysis across multiple sets of actors and related activity.
Read more Microsoft threat intelligence presented at CyberWarCon 2022 
Employee leaning down, working at computer station. Featured image for Microsoft Defender Experts for Hunting demonstrates industry-leading protection in the 2022 MITRE Engenuity ATT&CK® Evaluations for Managed Services
• 4 min read

Microsoft Defender Experts for Hunting demonstrates industry-leading protection in the 2022 MITRE Engenuity ATT&CK® Evaluations for Managed Services

Microsoft Defender Experts for Hunting, our newest managed threat hunting service, delivered top-class results during the inaugural MITRE Engenuity ATT&CK® Evaluations for Managed Services. Defender Experts for Hunting provided a seamless, comprehensive, and rapid response to the simulated attack using expert-led threat hunting and an industry-leading platform—Microsoft 365 Defender.
Read more Microsoft Defender Experts for Hunting demonstrates industry-leading protection in the 2022 MITRE Engenuity ATT&CK® Evaluations for Managed Services