Endpoint security – Page 2 – Computer Security Articles

Human-operated ransomware attacks: A preventable disaster

March 18, 2020 admin cybersecurity, DoppelPaymer, dridex, Endpoint security, hands-on-keyboard, human-operated attacks, Microsoft 365, Microsoft Defender Advanced Threat Protection, Microsoft security intelligence, parinacota, ransomware, ryuk, Secure Score, Security deployment, Threat protection, trickbot, wadhrama

Credit to Author: Eric Avena| Date: Thu, 05 Mar 2020 17:00:31 +0000

In human-operated ransomware attacks, adversaries exhibit extensive knowledge of systems administration and common network security misconfigurations, perform thorough reconnaissance, and adapt to what they discover in a compromised network.

The post Human-operated ransomware attacks: A preventable disaster appeared first on Microsoft Security .

Microsoft Security

Unifying security policy across all mobile form-factors with Wandera and Microsoft

February 19, 2020 admin Azure Security, Endpoint security, microsoft endpoint manager, Mobile Security

Credit to Author: Todd VanderArk| Date: Wed, 19 Feb 2020 17:00:17 +0000

The way we work is evolving. Technology enables more effective employees by helping them to be productive where and when they choose. Businesses also enjoy the productivity benefits of a connected workforce.

The post Unifying security policy across all mobile form-factors with Wandera and Microsoft appeared first on Microsoft Security .

Microsoft Security

Ghost in the shell: Investigating web shell attacks

February 5, 2020 admin China Chopper, cybersecurity, Detection and Response Team (DART), Endpoint security, gallium, Incident Response, krypton, Microsoft Defender Advanced Threat Protection, microsoft detection and response team (dart), Microsoft security intelligence, Security Management, Threat protection, Web Shell, zinc

Credit to Author: Eric Avena| Date: Tue, 04 Feb 2020 17:30:40 +0000

Web shell attacks allow adversaries to run commands and steal data from an Internet-facing server or use the server as launch pad for further attacks against the affected organization.

The post Ghost in the shell: Investigating web shell attacks appeared first on Microsoft Security .

Microsoft Security

sLoad launches version 2.0, Starslord

January 21, 2020 admin Bits, cybersecurity, Endpoint security, Microsoft security intelligence, sload, starslord

Credit to Author: Eric Avena| Date: Tue, 21 Jan 2020 18:00:39 +0000

sLoad has launched version 2.0. With the new version, sLoad, which is a PowerShell-based Trojan downloader notable for its almost exclusive use of the Windows BITS service for malicious activities, has added an anti-analysis trick and the ability to track the stage of infection for every affected machine.

The post sLoad launches version 2.0, Starslord appeared first on Microsoft Security .

Microsoft Security

CISO series: Lessons learned from the Microsoft SOC—Part 3b: A day in the life

December 23, 2019 admin CISO series, Ciso series page, Endpoint security, Incident Response, lessons learned, Microsoft Defender Advanced Threat Protection, Microsoft Defender ATP

Credit to Author: Todd VanderArk| Date: Mon, 23 Dec 2019 17:00:57 +0000

In this next post in our series, we provide insight into a day in the life of our SOC analysts investigating common front door attacks.

The post CISO series: Lessons learned from the Microsoft SOC—Part 3b: A day in the life appeared first on Microsoft Security .

Microsoft Security

Mobile threat defense and intelligence are a core part of cyber defense

December 19, 2019 admin Endpoint security, Microsoft Defender Advanced Threat Protection, Microsoft Defender ATP, Microsoft Intelligent Security Association (MISA), Mobile Security

Credit to Author: Todd VanderArk| Date: Thu, 19 Dec 2019 17:00:32 +0000

To safeguard company assets, organizations need to augment their global cyber defense strategy with mobile threat intelligence.

The post Mobile threat defense and intelligence are a core part of cyber defense appeared first on Microsoft Security .

Microsoft Security

Multi-stage downloader Trojan sLoad abuses BITS almost exclusively for malicious activities

December 12, 2019 admin alternative protocol, Bits, cybersecurity, Endpoint security, living-off-the-land, Microsoft security intelligence, sload

Credit to Author: Eric Avena| Date: Thu, 12 Dec 2019 17:30:26 +0000

Many of today’s threats evolve to incorporate as many living-off-the-land techniques as possible into the attack chain. The PowerShell-based downloader Trojan known as sLoad, however, puts all its bets on BITS. Background Intelligent Transfer Service (BITS) is a component of the Windows operating system that provides an ability to transfer files in an asynchronous and…

The post Multi-stage downloader Trojan sLoad abuses BITS almost exclusively for malicious activities appeared first on Microsoft Security .

Microsoft Security

Improve cyber supply chain risk management with Microsoft Azure

December 9, 2019 admin Azure Security, Endpoint security, Microsoft Defender Advanced Threat Protection, Microsoft Defender ATP, Zero Trust

Credit to Author: Todd VanderArk| Date: Mon, 09 Dec 2019 17:00:03 +0000

To keep government agencies secure in the cloud, we must keep pace and stay ahead of cyber attackers by defending the cyber supply chain with Microsoft Azure.

The post Improve cyber supply chain risk management with Microsoft Azure appeared first on Microsoft Security .