mapp

  1. Microsoft Announces Top Three Contributing Partners in the Microsoft Active Protections Program (MAPP)

    Today Microsoft announced the MAPP program Top Vulnerability Contributors, Top Threat Indicator Submitters, and Top Zero-Day Reporting for the period of July 1, 2018 – June 30, 2019. The Microsoft Active Protections Program provides security and protection to customers through cooperation and...
    • News
    • Thread
    • collaboration contributors mapp microsoft partners protection security threats vulnerabilities zero-day
    • Replies: 0
    • Forum: Security Alerts

  2. Microsoft Launches a New Recognition Program for MAPP Partners

    There are many dedicated people and organizations who contribute to the protection and security of our common customers. For years, Microsoft has recognized security researchers for helping protect the ecosystem. Now, we’re announcing the launch of a new program to better recognize and thank...
    • News
    • Thread
    • awards black hat contributions ecosystem evangelism indicator information disclosure mapp microsoft partners programs protection recognition research response security strategist threats update vulnerabilities
    • Replies: 0
    • Forum: Security Alerts

  3. Driving a Collectively Stronger Security Community with Microsoft Interflow

    Today, Microsoft is pleased to announce the private preview of Link Removed, a security and threat information exchange platform for analysts and researchers working in cybersecurity. Interflow uses industry specifications to create an automated, machine-readable feed of threat and security...
    • News
    • Thread
    • automated systems cloud computing collaboration cost management cybersecurity cybox data exchange data feeds incident response interflow mapp microsoft network security private preview security community security software stix taxii threats vulnerability
    • Replies: 0
    • Forum: Security Alerts

  4. Leaving Las Vegas and the August 2013 security updates

    Two weeks ago I, along with 7,500 of my closest friends, attended the Black Hat security conference in Las Vegas, NV. I can’t speak for everyone, but I certainly had a great – if not exhausting – time while there. While there were a lot of great talks, a personal highlight for me each year is...
    • News
    • Thread
    • 2013 black hat bluehat bulletin challenges critical update deployment priority internet explorer mapp md5 hashing microsoft nla technology remote code execution security software compatibility trustworthy computing update vulnerabilities webcast windows
    • Replies: 0
    • Forum: Security Alerts

  5. Blue Hat Prize technology available in Tech Preview

    One year ago this week we challenged the security community to take an unconventional focus on defensive innovation. We called that challenge the Link Removed due to 404 Error, and tomorrow night, we will award the grand prize of $200,000 to one of the finalists - Jared DeMott, Ivan Fratric, or...
    • News
    • Thread
    • black hat bluehat prize collaboration defense innovation emet exploit exploit economics innovation mapp mitigation msvr prizes protection research rop techniques security security community technology trustworthy computing vulnerabilities
    • Replies: 0
    • Forum: Security Alerts

  6. MAPP Update: Taking Action to Decrease Risk of Information Disclosure

    During our investigation into the disclosure of confidential data shared with our Microsoft Active Protections Program (MAPP) partners, we determined that a member of the MAPP program, Hangzhou DPTech Technologies Co., Ltd., had breached our non-disclosure agreement (NDA). Microsoft takes...
    • News
    • Thread
    • active breach computing confidentiality control enhancements information information disclosure investigation mapp microsoft nda partners protection regulatory compliance report risk security trustworthy update
    • Replies: 0
    • Forum: Security Alerts

  7. Proof-of-Concept Code available for MS12-020

    On March 15, we became aware of public proof-of-concept code that results in denial of service for the issue addressed by MS12-020, which we released Tuesday. We continue to watch the threat landscape and we are not aware of public proof-of-concept code that results in remote code execution...
    • News
    • Thread
    • active protections program confidentiality consumer protection cve-2012-0002 denial of service deployment extended security updates mapp microsoft mitigation ms12-020 optimal decisions proof of concept remote code execution security software vendors threat landscape trustworthy computing update vulnerabilities
    • Replies: 0
    • Forum: Security Alerts

  8. News from MAPP, and Advance Notification Service for the December 2011 Bulletin Release

    Hello all. Before we look at next week’s bulletin release, we’d like to point out an update to our Microsoft Active Protections Program (MAPP) that should provide customers with greater transparency as to how MAPP partners use the information we share with them when we release...
    • News
    • Thread
    • advisory bulletin december deployment insights internet explorer live questions mapp microsoft notifications office protection security testing transparency trustworthy computing update vulnerabilities webcast windows
    • Replies: 0
    • Forum: Security Alerts

  9. Microsoft Security Advisory (2639658): Vulnerability in TrueType Font Parsing Could Allow Elevation

    Revision Note: V1.3 (November 8, 2011): Added link to MAPP Partners with Updated Protections in the Executive Summary. Revised impact statement for the workaround, Deny access to T2EMBED.DLL, to address a reoffer issue on Windows XP and Windows Server 2003. Also, revised the mitigating factors...
    • News
    • Thread
    • access advisory attack elevation exploitation fonts impact kernel malware mapp microsoft parsing programs protection security truetype vulnerability windows server windows xp workaround
    • Replies: 0
    • Forum: Security Alerts

  10. MSRC Progress Report Shows Continued Progress of MSRC Key Initiatives

    Today, the MSRC released its Link Removed due to 404 Errort highlighting advancements of key Microsoft programs designed to help prevent and defend against online threats. The Microsoft programs featured in this paper include the following: The Link Removed due to 404 Error (MAPP) and Link...
    • News
    • Thread
    • adobe collaboration conference customers exploitability feedback indexing industry information disclosure initiatives mapp msrc msvr progress protection report security software update vulnerabilities
    • Replies: 0
    • Forum: Security Alerts

  11. Microsoft releases Security Advisory 2490606

    Hello - Today we released Link Removed due to 404 Error, which addresses a publicly disclosed vulnerability affecting Microsoft Windows Graphics Rendering Engine on Vista, Server 2003, and Windows XP. We are not aware of any affected customers, nor of any active attacks targeting customers. The...
    • News
    • Thread
    • advisory antivirus engine firewall graphics guidance malware mapp microsoft protection rendering security server 2003 threats update user rights vulnerability windows windows vista
    • Replies: 0
    • Forum: Security Alerts