The Wayback Machine - https://web.archive.org/web/20221216171827/https://www.microsoft.com/en-us/security/blog/
Skip to main content
Skip to main content
Microsoft Security
Sign in
• 3 min read

Cyber Signals: Risks to critical infrastructure on the rise

Read more Cyber Signals: Risks to critical infrastructure on the rise
Subscribe
Male first line worker using laptop folded open as tablet, standing on home furnishings sales floor, looking at a wall-mounted customer support monitor which displays an advertisement for bedding. A desktop monitor sits on a desk behind him. Featured image for MCCrash: Cross-platform DDoS botnet targets private Minecraft servers
• 8 min read

MCCrash: Cross-platform DDoS botnet targets private Minecraft servers

The Microsoft Defender for IoT research team analyzed a cross-platform botnet that infects both Windows and Linux systems from PCs to IoT devices, to launch distributed denial of service (DDoS) attacks against private Minecraft servers.
Read more MCCrash: Cross-platform DDoS botnet targets private Minecraft servers
Hybrid employee working in home office on portable device. Featured image for Do more with less with Microsoft Security—3 strategies to get you started
• 6 min read

Do more with less with Microsoft Security—3 strategies to get you started

Microsoft Corporate Vice President of Compliance, Identity, and Management Vasu Jakkal explores what it means to do more with less in your security approach.
Read more Do more with less with Microsoft Security—3 strategies to get you started
Female surgeon typing on digital tablet in hospital or surgery. Featured image for 4 things to look for in a multicloud data protection solution
• 4 min read

4 things to look for in a multicloud data protection solution

Learn four must-haves for multicloud data protection, including how an integrated solution provides greater scalability and protection across your multicloud and hybrid environment.
Read more 4 things to look for in a multicloud data protection solution
female developer wearing headphones; coding at her PC workspace in an enterprise office, using Visual Studio on a multi-monitor set up. Featured image for IIS modules: The evolution of web shells and how to detect them 
• 10 min read

IIS modules: The evolution of web shells and how to detect them 

This blog aims to provide further guidance on detecting malicious IIS modules and other capabilities that you can use during your own incident response investigations.
Read more IIS modules: The evolution of web shells and how to detect them 
a person sitting at a table using a laptop computer Featured image for Mitigate threats with the new threat matrix for Kubernetes
• 4 min read

Mitigate threats with the new threat matrix for Kubernetes

The updated threat matrix for Kubernetes comes in a new format that simplifies usage of the knowledge base and with new content to help mitigate threats.
Read more Mitigate threats with the new threat matrix for Kubernetes
a person sitting on a bench in front of a window Featured image for DEV-0139 launches targeted attacks against the cryptocurrency industry
• 17 min read

DEV-0139 launches targeted attacks against the cryptocurrency industry

Microsoft security researchers investigate an attack where the threat actor, tracked DEV-0139, used chat groups to target specific cryptocurrency investment companies and run a backdoor within their network.
Read more DEV-0139 launches targeted attacks against the cryptocurrency industry
Chief Information Officer working from home. Featured image for Implementing Zero Trust access to business data on BYOD with Trustd MTD and Microsoft Entra
• 3 min read

Implementing Zero Trust access to business data on BYOD with Trustd MTD and Microsoft Entra

Protect business data—and employee privacy—with conditional access on employees’ personal devices with Trustd MTD and Microsoft Entra.
Read more Implementing Zero Trust access to business data on BYOD with Trustd MTD and Microsoft Entra
Aerial view of the pentagon. Featured image for Microsoft supports the DoD’s Zero Trust strategy
• 5 min read

Microsoft supports the DoD’s Zero Trust strategy

The Department of Defense released its formal Zero Trust strategy, marking a major milestone in its goal of achieving enterprise-wide implementation by 2027.
Read more Microsoft supports the DoD’s Zero Trust strategy
a man and a woman standing in a room Featured image for Join us at InfoSec Jupyterthon 2022
• 1 min read

Join us at InfoSec Jupyterthon 2022

Join our community of analysts and engineers at the third annual InfoSec Jupyterthon 2022, an online event taking place on December 2 and 3, 2022.
Read more Join us at InfoSec Jupyterthon 2022
a person standing in front of a building Featured image for Vulnerable SDK components lead to supply chain risks in IoT and OT environments
• 6 min read

Vulnerable SDK components lead to supply chain risks in IoT and OT environments

As vulnerabilities in network components, architecture files, and developer tools have become an increasingly popular attack vector to leverage access into secure networks and devices, Microsoft identified such a vulnerable component and found evidence of a supply chain risk that might affect millions of organizations and devices.
Read more Vulnerable SDK components lead to supply chain risks in IoT and OT environments
a man standing in front of a computer Featured image for DEV-0569 finds new ways to deliver Royal ransomware, various payloads
• 7 min read

DEV-0569 finds new ways to deliver Royal ransomware, various payloads

DEV-0569’s recent activity shows their reliance on malvertising and phishing in delivering malicious payloads. The group’s changes and updates in delivery and payload led to distribution of info stealers and Royal ransomware.
Read more DEV-0569 finds new ways to deliver Royal ransomware, various payloads
Retail store manager using a tablet securely while working remote from a café. Featured image for Microsoft contributes S2C2F to OpenSSF to improve supply chain security
• 3 min read

Microsoft contributes S2C2F to OpenSSF to improve supply chain security

We are pleased to announce that the S2C2F has been adopted by the OpenSSF under the Supply Chain Integrity Working Group and formed into its own Special Initiative Group. Our peers at the OpenSSF and across the globe agree with Microsoft when it comes to how fundamental this work is to improving supply chain security for everyone.
Read more Microsoft contributes S2C2F to OpenSSF to improve supply chain security