By default, there are over 30 recommendations pertaining to database resources spread across Azure, AWS, and GCP. Quite often, the Cloud Security Admin who is spending time in Defender for Cloud isn’t the person responsible for the configuration or remediation of a database resource. If your Database Administrators are swamped with work (highly likely), the …
Better Together = Defender CSPM + Database Protections Continue Reading
Introduction In cloud security domain, we often need to monitor entities – such as users, IP addresses, applications, or access tokens – and their patterns of behavior. We might want to detect ‘novelties’ – unexpected and previously unseen values of these entities – which can indicate security issues. Some examples of such scenarios are: IP …
Effective novelty detection in cloud security domain Continue Reading
At Microsoft, we’re seeing firsthand how data is powering incredible innovation and accelerating more than just a platform shift, it is changing the way we do everything. AI and generative AI are not futuristic abstract concepts, they are being deployed by millions every day, transforming every industry. Tapping into the full potential of that opportunity requires …
Power what’s next with limitless relational databases from Azure Continue Reading
Welcome to Microsoft Ignite 2023! The past year has been one of true transformation. Companies are seeing real benefits today and are eager to explore what’s next—including how they can do more with their data investments, build intelligent applications, and uncover what AI can do for their business. We recently commissioned a study through IDC …
This blog was co-written with Loren Lachapelle, Dotan Patrich, and Assaf Berenson. In this era of AI-driven competition, enterprises of all sizes have prioritized the value of migrating their app development from on-premises to the cloud. As developers rapidly publish new cloud applications, bad actors are equally relentless in seeking new ways to exploit misconfigured …
Protect your web apps from modern threats with Microsoft Defender for Cloud Continue Reading
Microsoft has been tracking activity related to the financially motivated threat actor Octo Tempest, whose evolving campaigns represent a growing concern for organizations across multiple industries. Octo Tempest leverages broad social engineering campaigns to compromise organizations across the globe with the goal of financial extortion. With their extensive range of tactics, techniques, and procedures (TTPs), …
For a long time, if you were using the multi-tenant, PaaS version on many Azure services, then you had to access them over the internet with no way to restrict access just to your resources. This restriction was primarily down to the complexity of doing this sort of restrictions with a multi-tenant service. At that …
We are grateful for the trust our customers have placed in Windows Server 2012/R2 as a part of their organizations for the past decade. With this release of Windows Server having launched 10 years ago, it reaches end of support on October 10th, 2023, per our 10-year lifecycle policy. After this date, no more security …
Secure Windows Server 2012/R2 workloads with options from Azure Continue Reading
Introduction In today’s digital landscape, where over 90 percent of organizations have embraced multicloud1 solutions, security teams face the growing complexity of maintaining robust security controls and cloud security posture across multi-cloud environments. Microsoft Defender for Cloud offers protection for cloud infrastructure, applications, and data providing a single contextual view of cloud risks across Azure, Amazon Web …
Proactively secure your Google Cloud Resources with Microsoft Defender for Cloud Continue Reading
Microsoft security researchers recently identified a campaign where attackers attempted to move laterally to a cloud environment through a SQL Server instance. This attack technique demonstrates an approach we’ve seen in other cloud services such as VMs and Kubernetes cluster, but not in SQL Server. The attackers initially exploited a SQL injection vulnerability in an …
Defending new vectors: Threat actors attempt SQL Server to cloud lateral movement Continue Reading
