threat mitigation

  1. Incident Detection & Response: Planning for the Inevitable

    Date: Thursday, June 27, 2019 Time: 02:00 PM Eastern Daylight Time Duration: 1 hour The threat of a cyberattack is so eminent, organizations can no longer simply put up defenses and hope either they aren’t attacked, or defenses will hold should one Continue reading...
    • News
    • Thread
    • cyberattack cybersecurity eminent threat incident detection organization defense planning response plan risk management security strategy threat mitigation
    • Replies: 0
    • Forum: Live RSS Feeds

  2. TA18-086A: Brute Force Attacks Conducted by Cyber Actors

    Original release date: March 27, 2018 Systems Affected Networked systems Overview According to information derived from FBI investigations, malicious cyber actors are increasingly using a style of brute force attack known as password spraying against organizations in the United States and...
    • News
    • Thread
    • attack indicators brute force cloud applications cyber attacks cyber security data exfiltration dhs email security fbi federated authentication malicious actors multi-factor authentication network intrusion nist guidelines password spraying security policies single sign-on tactics threat mitigation victim environment
    • Replies: 0
    • Forum: Security Alerts

  3. MS16-123 - Important: Security Update for Windows Kernel-Mode Drivers (3192892) - Version: 1.1

    Severity Rating: Important Revision Note: V1.1 (October 11, 2016): Bulletin revised to correct a CVE ID. CVE-2016-7191 has been changed to CVE-2016-7211. This is an informational change only. Customers who have successfully installed the updates do not need to take any further action. Summary...
    • News
    • Thread
    • cve cybersecurity drivers important malware microsoft windows ms16-123 october 2016 patch management privilege escalation revision note security update software system security system update technology threat mitigation update vulnerabilities windows kernel
    • Replies: 0
    • Forum: Security Alerts

  4. MS16-079 - Important: Security Update for Microsoft Exchange Server (3160339) - Version: 1.0

    Severity Rating: Important Revision Note: V1.0 (June 14, 2016): Bulletin published. Summary: This security update resolves vulnerabilites in Microsoft Exchange Server. The most severe of the vulnerabilities could allow information disclosure if an attacker sends a specially crafted image URL in...
    • News
    • Thread
    • bulletin cybersecurity email security exchange server information disclosure information technology it security june 2016 microsoft ms16-079 networking owa patch security server management threat mitigation update version 1.0 vulnerabilities
    • Replies: 0
    • Forum: Security Alerts

  5. MS15-096 - Important: Vulnerability in Active Directory Service Could Allow Denial of...

    Severity Rating: Important Revision Note: V1.0 (September 8, 2015): Bulletin published. Summary: This security update resolves a vulnerability in Active Directory. The vulnerability could allow denial of service if an authenticated attacker creates multiple machine accounts. To exploit the...
    • News
    • Thread
    • access control active directory authentication bulletins denial of service it security machine accounts microsoft ms15-096 network security patch management privileged access security update september 2015 system admin threat mitigation vulnerability windows server windows update
    • Replies: 0
    • Forum: Security Alerts

  6. August 2015 Security Update Release Summary

    Today we released security updates to provide protections against malicious attackers. As a best practice, we encourage customers to apply security updates as soon as they are released. More information about this month’s security updates and Link Removed can be found in the Security TechNet...
    • News
    • Thread
    • august 2015 best practices cybersecurity important updates incident response malware msrc patch management protection security software updates system security technet threat mitigation update user safety vulnerability windows update
    • Replies: 0
    • Forum: Security Alerts

  7. TA15-120A: Securing End-to-End Communications

    Original release date: April 30, 2015 Systems Affected Networked systems Overview Securing end-to-end communications plays an important role in protecting privacy and preventing some forms of man-in-the-middle (MITM) attacks. Recently, researchers described a MITM attack used to inject...
    • News
    • Thread
    • authentication browser security certificate certificate pinning communications cyber attack dane data protection digital certificate encryption mitm attack network notary network security privacy ssl systems affected threat mitigation tls vulnerability web security
    • Replies: 0
    • Forum: Security Alerts

  8. Taste of Premier: How to Mitigate Pass-the-Hash and Other Forms of Credential Theft

    Lex Thomas welcomes Mark Simos, an Architect for the Cyber, Security and Identity team here at Microsoft, to discuss tools, techniques and services that are available to help mitigate “Pass-the-Hash” and other forms of cyber credential theft. Tune in as they give us an in-depth overview of the...
    • News
    • Thread
    • active directory cloud solutions credential theft cyber security identity management it architecture microsoft network security pass-the-hash podcast privileged access security features security overview security tools system center teched threat mitigation virtualization windows 10 windows server
    • Replies: 0
    • Forum: Live RSS Feeds

  9. MS12-049 - Important : Vulnerability in TLS Could Allow Information Disclosure (2655992) -...

    Severity Rating: Important Revision Note: V1.1 (July 9, 2013): Bulletin revised to announce a detection change in the Windows Vista packages for the 2655992 update to correct a Windows Update reoffering issue. This is a detection change only. Customers who have already successfully updated their...
    • News
    • Thread
    • cipher suites cryptography information disclosure security threat mitigation tls update vulnerability windows vista
    • Replies: 0
    • Forum: Security Alerts

  10. MS11-043 - Critical : Vulnerability in SMB Client Could Allow Remote Code Execution (2536276)...

    Severity Rating: Critical Revision Note: V2.2 (July 9, 2013): Bulletin revised to announce a detection change in the Windows Vista packages for the 2536276 update to correct a Windows Update reoffering issue. This is a detection change only. Customers who have already successfully updated their...
    • News
    • Thread
    • critical update cybersecurity microsoft security ms11-043 patch management remote code execution security update smb vulnerability threat mitigation windows vista
    • Replies: 0
    • Forum: Security Alerts

  11. Security Advisory 2743314 released

    Today, we published Security Advisory 2743314, which provides guidance that will help protect customers from a technique that could allow a man-in-the middle attack to obtain a user’s domain credentials when VPN is configured to use PPTP and MSCHAPv2. Customers concerned with this...
    • News
    • Thread
    • advisory credentials cybersecurity data protection guidance it security man-in-the-middle microsoft mschapv2 msrc network security pptp risk management security technical update threat mitigation trustworthy computing user protection vpn
    • Replies: 0
    • Forum: Security Alerts

  12. MS10-092: Vulnerability in Task Scheduler could allow for elevation of privilege

    Resolves vulnerabilities in Windows Task Scheduler that could allow elevation of privilege if an attacker logged on to an affected system and ran a specially crafted application. An attacker must have valid logon credentials and be able to log on... More...
    • News
    • Thread
    • attack vector elevate privilege logon credentials microsoft update security patch system administration task scheduler threat mitigation vulnerability windows security
    • Replies: 0
    • Forum: Knowledge Base (KB)

  13. Microsoft Office "Anti-Bulletin"

    In November 2010, Microsoft released the first Security Bulletin (Link Removed due to 404 Error) against an Office 2010 component, in this case Microsoft Word. Approximately 6 months had elapsed since Office 2010 launched in May and while it's good for such a widely used product to be available...
    • News
    • Thread
    • bulletin development document security file parsing file validation fuzzing microsoft microsoft engineering office 2003 office 2007 office 2010 protected view security software enhancement testing threat mitigation updates user safety vulnerabilities word 2010
    • Replies: 0
    • Forum: Security Alerts