Navigation section
operational security
-
AA20-352A: Advanced Persistent Threat Compromise of Government Agencies, Critical Infrastructure, and Private Sector Organizations
Original release date: December 17, 2020 Summary This Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) version 8 framework. See the ATT&CK for Enterprise version 8 for all referenced threat actor tactics and techniques. The Cybersecurity and Infrastructure...- News
- Thread
- apt compliance cybersecurity data exfiltration government security identity theft incident response infrastructure security malicious code malware mitigation operational security privileged access remediation saml solarwinds supply chain technical details threat detection vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
AA20-239A: FASTCash 2.0: North Korea's BeagleBoyz Robbing Banks
Original release date: August 26, 2020 Summary This Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework. See the ATT&CK for Enterprise framework for all referenced threat actor techniques. This joint advisory is the result of analytic efforts among...- News
- Thread
- apt38 atm cash-outs bank heists beagleboyz cryptocurrency cyber threats cybersecurity data security exfiltration techniques financial services hidden cobra incident response international fraud iso 8583 malware mitre att&ck north korea operational security swift fraud threat detection
- Replies: 0
- Forum: Security Alerts
-
AA20-120A: Microsoft Office 365 Security Recommendations
Original release date: April 29, 2020 Summary As organizations adapt or change their enterprise collaboration capabilities to meet “telework” requirements, many organizations are migrating to Microsoft Office 365 (O365) and other cloud collaboration services. Due to the speed of these...- News
- Thread
- alerts audit logging azure active directory best practices cloud collaboration configuration cybersecurity data protection least privilege legacy protocols microsoft teams multi-factor authentication office 365 operational security phishing prevention recommendations security siem integration user access control work from home
- Replies: 0
- Forum: Security Alerts
-
VIDEO Inside MSRC: Sharing Our Story & Customer Tips
For the last 20 years, the Microsoft Security Response Center has been an integral part of Microsoft’s commitment to customer security. We are often called on to talk about the work we do and how customers can apply the lessons we have learned over that period to better their security posture...- News
- Thread
- best practices blue teams bug bounty cloud security coordinated disclosure customer tips cybersecurity government programs industry programs microsoft msrc operational security red teams secure code security security conferences security practices security strategy videos vulnerability
- Replies: 1
- Forum: Security Alerts
-
Inside the MSRC – How we recognize our researchers
This is the first of a series of blog entries to give some insight into the Microsoft Security Response Center (MSRC) business and how we work with security researchers and vulnerability reports. The Microsoft Security Response Center actively recognizes those security researchers who help us...- News
- Thread
- acknowledgement awards bug bounty community customer security cve engagement insights microsoft monthly bulletin online services operational security researchers response center security security research security update submissions threat landscape vulnerability
- Replies: 0
- Forum: Security Alerts
-
TA13-175A: Risks of Default Passwords on the Internet
Original release date: June 24, 2013 Systems Affected Any system using password authentication accessible from the internet may be affected. Critical infrastructure and other important embedded systems, appliances, and devices are of particular concern. Overview Attackers can easily...- News
- Thread
- access control authentication change passwords critical infrastructure default passwords incident activity internet risks iot security malware network access operational security password management password policies remote access scanning tools security shodan unique passwords vulnerability
- Replies: 0
- Forum: Security Alerts