New Microsoft Incident Response guide simplifies threat investigation | Microsoft Security Blog
There’s an increasing demand for skilled cybersecurity professionals. It’s being driven by a surge in cyberthreats and more sophisticated attackers. However, many employers are hesitant to fill open cybersecurity roles and are hiring conservatively in case of economic downturn—even though they understand the importance of having the right expertise to mitigate contemporary cyberrisks. Organization
Peach Sandstorm password spray campaigns enable intelligence collection at high-value targets | Microsoft Security Blog
Since February 2023, Microsoft has observed password spray activity against thousands of organizations carried out by an actor we track as Peach Sandstorm (HOLMIUM). Peach Sandstorm is an Iranian nation-state threat actor who has recently pursued organizations in the satellite, defense, and pharmaceutical sectors around the globe. Based upon the profile of victim organizations targeted and the ob
How Microsoft is expanding cloud logging to give customers deeper security visibility | Microsoft Security Blog
In response to the increasing frequency and evolution of nation-state cyberthreats, Microsoft is taking additional steps to protect our customers and increase the secure-by-default baseline of our cloud platforms. These steps are the result of close coordination with commercial and government customers, and with the Cybersecurity and Infrastructure Security Agency (CISA) about the types of securit
Volt Typhoon targets US critical infrastructure with living-off-the-land techniques | Microsoft Security Blog
Microsoft has uncovered stealthy and targeted malicious activity focused on post-compromise credential access and network system discovery aimed at critical infrastructure organizations in the United States. The attack is carried out by Volt Typhoon, a state-sponsored actor based in China that typically focuses on espionage and information gathering. Microsoft assesses with moderate confidence tha
Gatekeeper’s Achilles heel: Unearthing a macOS vulnerability | Microsoft Security Blog
On July 27, 2022, Microsoft discovered a vulnerability in macOS that can allow attackers to bypass application execution restrictions imposed by Apple’s Gatekeeper security mechanism, designed to ensure only trusted apps run on Mac devices. We developed a proof-of-concept exploit to demonstrate the vulnerability, which we call “Achilles”. Gatekeeper bypasses such as this could be leveraged as a ve
North Korean threat actor targets small and midsize businesses with H0lyGh0st ransomware | Microsoft Security Blog
April 2023 update – Microsoft Threat Intelligence has shifted to a new threat actor naming taxonomy aligned around the theme of weather. DEV-0530 is now tracked as Storm-0530 and PLUTONIUM is now tracked as Onyx Sleet. To learn about how the new taxonomy represents the origin, unique traits, and impact of threat actors, and to get a complete mapping of threat actor names, read this blog: Microsoft
Microsoft finds new elevation of privilege Linux vulnerability, Nimbuspwn | Microsoft Security Blog
Microsoft has discovered several vulnerabilities, collectively referred to as Nimbuspwn, that could allow an attacker to elevate privileges to root on many Linux desktop endpoints. The vulnerabilities can be chained together to gain root privileges on Linux systems, allowing attackers to deploy payloads, like a root backdoor, and perform other malicious actions via arbitrary root code execution. M
NOBELIUM targeting delegated administrative privileges to facilitate broader attacks | Microsoft Security Blog
The Microsoft Threat Intelligence Center (MSTIC) has detected nation-state activity associated with the threat actor tracked as NOBELIUM, attempting to gain access to downstream customers of multiple cloud service providers (CSP), managed service providers (MSP), and other IT services organizations (referred to as “service providers” for the rest of this blog) that have been granted administrative
Windows 365 クラウド PC のプランと価格 | Microsoft
すべての Microsoft 製品 Global Microsoft 365 Teams Copilot Windows Surface Xbox セール 法人向け サポート ソフトウェア Windows アプリ AI OneDrive Outlook Skype OneNote Microsoft Teams PC とデバイス Xbox を購入する アクセサリ VR & 複合現実 エンタメ Xbox Game Pass Ultimate Xbox Live Gold Xbox とゲーム PC ゲーム Windows ゲーム 映画とテレビ番組 法人向け Microsoft Cloud Microsoft Security Azure Dynamics 365 一般法人向け Microsoft 365 Microsoft Industry Microsoft Power Platform W
マイクロソフトの ISMAP 対応について - マイクロソフト業界別の記事
日本マイクロソフトでは弊社の提供するすべてのクラウドサービスについて、IaaS/PaaS/SaaS の区別にかかわらず、監査対象時期に正式公開されているすべてのクラウドサービスについて同時に ISMAP 取得を取得することおよび取得スケジュールを 2020 年 11 月 25 日の戦略説明会その他の場におきましてお伝えしており、そのスケジュール計画通りに、すでにすべてのサービスの ISMAP 監査を問題なく終了しています。 現在、申請手続きを進めており、3 月の申請で ISMAP 運営委員会の審査を経まして、5 月または 6 月に公開される予定の 2 回目のリストでの掲載を予定しています。 この方針は 2020 年 11 月 25 日に開催した政府・自治体向け戦略説明会で発表している通りです。 なお、他社に比べ提供サービスの対象や領域が広いこと、対象となるデータセンターも日本の東日本、西日
Microsoft 365 Education - Microsoft Education
安全かつ将来も使い続けられる IT 学習を加速させる Learning Accelerators は、児童生徒が遅れを取り戻し、進歩し、成功するために役立ちます。 これらのツールを使って、読み書きや計算といった主要教科で即座にフィードバックを得ながら、もっとたくさん練習できる機会を児童生徒のために作りましょう。Learning Accelerators では、進歩を追いながら教員に実践的な分析データも提供できます。
ZINC attacks against security researchers | Microsoft Security Blog
In recent months, Microsoft has detected cyberattacks targeting security researchers by an actor we track as ZINC. The campaign originally came to our attention after Microsoft Defender for Endpoint detected an attack in progress. Observed targeting includes pen testers, private offensive security researchers, and employees at security and tech companies. Microsoft Threat Intelligence Center (MSTI
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
Page not found
Cyberthreats increasingly target the world’s biggest event stages| Security Insider
Prevent credential breaches with Microsoft | Microsoft Security Blog
Prevent cyberattacks with Microsoft Incident Response | Microsoft Security Blog
Windows 11、OS、コンピューターおよびアプリのパワーを体験する
https://www.microsoft.com/security/blog/2021/10/06/microsofts-5-guiding-principles-for-decentralized-identities/?s=09
事例 ｜Microsoft GIGA スクールパッケージ
Threat matrix for storage services | Microsoft Security Blog