Endpoint security – Page 3 – Computer Security Articles

Credit to Author: Todd VanderArk| Date: Mon, 04 Nov 2019 17:00:37 +0000

Today, at the Microsoft Ignite Conference in Orlando, Florida, I’m thrilled to share the significant progress we’re making on delivering endpoint security from Microsoft, not just for Microsoft.

The post Further enhancing security from Microsoft, not just for Microsoft appeared first on Microsoft Security .

Microsoft Security

Microsoft’s 4 principles for an effective security operations center

October 16, 2019 admin AI and machine learning, Azure Security, CISO series, Ciso series page, Endpoint security

Credit to Author: Todd VanderArk| Date: Tue, 15 Oct 2019 16:00:50 +0000

Microsoft Chief Cybersecurity Strategist, Jonathan Trull, outlines four principles any organization can use to improve the effectiveness of its SOC.

The post Microsoft’s 4 principles for an effective security operations center appeared first on Microsoft Security .

Microsoft Security

Guarding against supply chain attacks—Part 1: The big picture

October 16, 2019 admin cybersecurity policy, Data governance, Endpoint security

Credit to Author: Todd VanderArk| Date: Wed, 16 Oct 2019 16:00:54 +0000

Paying attention to every link in your supply chain is vital to protect your assets from supply chain attacks.

The post Guarding against supply chain attacks—Part 1: The big picture appeared first on Microsoft Security .

Microsoft Security

Microsoft’s 4 principals for an effective security operations center

October 15, 2019 admin AI and machine learning, Azure Security, CISO series, Ciso series page, Endpoint security

Credit to Author: Todd VanderArk| Date: Tue, 15 Oct 2019 16:00:50 +0000

Microsoft Chief Cybersecurity Strategist, Jonathan Trull, outlines four principles any organization can use to improve the effectiveness of its SOC.

The post Microsoft’s 4 principals for an effective security operations center appeared first on Microsoft Security .

Microsoft Security

In hot pursuit of elusive threats: AI-driven behavior-based blocking stops attacks in their tracks

October 8, 2019 admin AI and machine learning, amsi paired machine learning, automation, behavior-based machine learning, behavioral blocking and containment, cybersecurity, endpoint protection platform, Endpoint security, Microsoft Defender ATP, Microsoft security intelligence, Security Intelligence, threat and malware prevention

Credit to Author: Eric Avena| Date: Tue, 08 Oct 2019 15:00:11 +0000

Two new machine learning protection features within the behavioral blocking and containment capabilities in Microsoft Defender ATP specialize in detecting threats by analyzing behavior, adding new layers of protection after an attack has started running.

The post In hot pursuit of elusive threats: AI-driven behavior-based blocking stops attacks in their tracks appeared first on Microsoft Security .

Microsoft Security

Bring your own LOLBin: Multi-stage, fileless Nodersok campaign delivers rare Node.js-based malware

September 26, 2019 admin AI and machine learning, cybersecurity, Endpoint security, fileless, Microsoft Defender Advanced Threat Protection, Microsoft security intelligence, nodersok, Security Intelligence

Credit to Author: Eric Avena| Date: Thu, 26 Sep 2019 17:34:41 +0000

We’ve discussed the challenges that fileless threats pose in security, and how Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) employs advanced strategies to defeat these sophisticated threats. Part of the slyness of fileless malware is their use of living-off-the-land techniques, which refer to the abuse of legitimate tools, also called living-off-the-land binaries (LOLBins), that…

The post Bring your own LOLBin: Multi-stage, fileless Nodersok campaign delivers rare Node.js-based malware appeared first on Microsoft Security .

Microsoft Security

Deep learning rises: New methods for detecting malicious PowerShell

September 3, 2019 admin AI and machine learning, cybersecurity, deep learning, Endpoint security, machine learning, Microsoft Defender ATP, Microsoft security intelligence, Powershell, Security Intelligence, Threat protection

Credit to Author: Eric Avena| Date: Tue, 03 Sep 2019 16:00:03 +0000

We adopted a deep learning technique that was initially developed for natural language processing and applied to expand Microsoft Defender ATP’s coverage of detecting malicious PowerShell scripts, which continue to be a critical attack vector.

The post Deep learning rises: New methods for detecting malicious PowerShell appeared first on Microsoft Security .