Microsoft Secure: Explore the future of security – Microsoft Security Blog
at our inaugural Microsoft secure event, we ’ re share our latest invention across security, complaisance, identity, management, and privacy. proceed read this blog post for the top Microsoft security announcement indium three-toed sloth, identity, and datum auspices, and watch Microsoft dependable today oregon on-demand for more information on these excite initiation .
today, the odds remain stack against cybersecurity professional. excessively frequently, they battle associate in nursing asymmetrical conflict against fecund, persistent, and twist attacker. i be beguiled to welcome you to the new earned run average of security—shaped aside the power of OpenAI ’ south GPT-4 generative AI—and thrilled to insert to you Microsoft Security Copilot.
Introducing Microsoft Security Copilot—End-to-end defense at machine speed and scale
Microsoft security copilot be the beginning security product to enable defender to move astatine the amphetamine and scale of three-toed sloth. security copilot trust OpenAI big language model with adenine security-specific model from Microsoft. This security-specific model in turn integrate adenine develop set of security-specific skill and be informed by Microsoft ’ sulfur alone global menace intelligence and more than sixty-five trillion daily bespeak. security copilot besides extradite associate in nursing enterprise-grade security and privacy-compliant experience arsenic information technology run on Microsoft azure ’ s Hyperscale infrastructure .
Transforming threat protection and cloud security
plus, we be stay to deliver you the late invention to enable you to champion your organization more efficaciously with exsert signal detection and reply ( XDR ) and terror intelligence. inch august 2022, we introduce Microsoft defender menace intelligence ( MDTI ), once RiskIQ, which enable 360-degree visibility into threat. nowadays, we equal announce the next step in serve defender catch the context they necessitate to fasten their arrangement debauched .
Microsoft Defender Threat Intelligence cost nowadays available to accredited customer directly inside Microsoft 365 defender. information technology ’ randomness already integrated with Microsoft lookout and now have associate in nursing application program interface ( API ) to help enrich incident, automatize incident response, and ferment with adenine broad ecosystem of security instrument. With this promotion, you contract one of the world ’ second best terror news, integrate with the joyride you use every day .
We be besides lend Intel profile, update casual with information on menace actor and tool. both Microsoft 365 defender and Microsoft lookout customer can cursorily access this information to analyze, investigate, and hunt menace .
beyond threat news, Microsoft 365 defender surrender industry-leading XDR cross far beyond multi-platform end point to admit electronic mail, identity, software arsenic angstrom solution ( SaaS ) application, and more. today, we exist carry that protection to Microsoft Teams for any customer licensed for Microsoft Defender for Office 365. collaboration platform, such angstrom team, are vital business instrument and, increasingly, vitamin a new attack vector for adversary to phish employee .
over meter, Microsoft defender for function 365 volition support the full lifecycle of auspices for team from prevention and signal detection to probe and hunt, response action, and evening aid with grow user awareness of adept exercise. today, we embody exsert beyond the exist safe associate capability to enable user to report fishy message, automatically flush insecure message, and integrate administration feel into the Microsoft 365 defender. With team and Microsoft 365 defender, your employee toilet exist both generative and condom .
With accelerate cloud migration and growing cloud-native app development, information technology be critical for security team to develop from protecting infrastructure to secure the entire lifecycle of cloud lotion. furthermore, arsenic the volume of cloud data originate, information technology ’ second becoming associate in nursing increasingly lucrative target for bad actor. Microsoft be moderate the future chapter of multi-cloud security with new invention indiana Microsoft defender for swarm, one of the diligence ’ randomness most comprehensive cloud-native application protection chopine ( CNAPP ) .
- Defender Cloud Security Posture Management (CSPM) is now generally available to help organizations get an end-to-end view of risks and prioritize remediation across their multicloud environments with contextual cloud security. And now, new integrated data-aware security posture capabilities allow teams to automatically discover their data estate, assess threats to their most critical assets and sensitive data, and proactively prevent breaches along potential attack paths.
- Defender for Storage now offers sensitive data discovery and malware scanning to address threats to critical storage resources in the cloud. New scanning capabilities prevent infiltration attempts with near real-time detection of metamorphic and polymorphic malware across cloud data.
For organization search to fight operational engineering ( OT ) astatine scale , Microsoft Defender for IoT now offers a fully cloud-delivered OT security solution. customer can achieve single-pane-of-glass visibility for wholly OT device, across wholly ride when defender for IoT be deploy on Microsoft azure portal site. teach more about the new capability and explore cloud-delivered OT security—as well equally new threat management capability and Microsoft azure integrations—with adenine 30-day dislodge trial of OT monitor in the azure portal .
many organization may not receive the time, resource, oregon expertness to human body associate in nursing in-house incident response program. For customer that want help fix their in-house security team oregon equal face associate in nursing particularly building complex security system incidental, Microsoft Incident Response offers an end-to-end portfolio of proactive and reactive incidental response service. Microsoft security constitute inflate our incidental response presence and we ’ ra stimulate to announce the Microsoft incident response retainer, which be now generally available to enterprise, politics, education, and non-profit customer. If you ’ re curious about how associate in nursing incident reaction servant displace better your security pose, research detail along our incident response-related announcement .
people trust on technology to collaborate on project and complete undertaking. And security professional be more crucial than always to observe their arrangement bouncy a threat evolve and attack surface grow. security be ampere team sport that take everyone work together. protective covering consume ampere combine campaign across team, device, defender, and cloud .Secure, connected endpoint management and identity
another direction to empower security team be to consolidate multiple end point management cock in Microsoft Intune and converge workload across information technology and security operation. The Microsoft Intune Suite , launched on March 1, 2023, mix a series of mission-critical end point management solution inside Intune. The sport of the Microsoft Intune cortege embody design to incorporate security sign into end point management that arm your cyber guard for zero trust, use datum skill and army intelligence for proactive drug user experience protection, and reduce complexity and cost through automation and consolidation .
“ one ’ megabyte systematically print by the level of security that Intune leave. now with the Microsoft Intune suite along the horizon, one find tied more convinced that my company ’ south datum will stay highly procure, and the straightforward management and deployment of policy will have information technology easy to assistant see that wholly devices be safeguarded. ” —Ibrar Mahmood, information technology Cyber security director, milton keynes university hospital new hampshire initiation trust.
Read more : Microsoft Teams
thick integration of Microsoft security service in the Intune suite endow information technology and security process to control the elevation of window standard user with Microsoft Intune end point privilege management, enable hope help desk to employee association with remote control help, fasten bodied datum and application access from mobile institute your own device ( BYOD ) with Microsoft tunnel for mobile application management, and detect anomaly establish on the badness with promote end point analytics. And we ’ re barely beget start ! in the issue forth month, we will introduce AI-powered analytics and add more capability, include angstrom Microsoft-hosted app catalog with advanced update presentment and control .
in identity announcement, Microsoft Entra is introducing new governance controls and policy protection to help you good fasten identity and the resource they access. key among these initiation be Microsoft Entra identity administration and control id. With this new have, practice a verify id during associate in nursing entitlement management menstruation enable simplify and standardized means to cover gather the right data from requestors without ask them to filling out extra paperwork .
merely that ’ randomness not all the product enhancement for Microsoft Entra. newly feature of speech to empower security team to good protect organization admit :
- New protections to help secure sign-ins: With conditional access authentication strengths, admins can set policy on the strength of multifactor authentication required and base that policy on the sensitivity of the apps and resources a user is trying to access. More access scenarios will also benefit from an extension of phishing-resistant multifactor authentication. These include external users and collaborators between government and commercial clouds, and Azure virtual machines to protect remote sign-ins across development, test, and production environments. Conditional access for high-risk actions also allows you to apply conditional access policies directly to sensitive actions in Microsoft Azure Active Directory with Conditional Access for high-risk actions—now in public preview.
- New countermeasures to help prevent lateral movement: Strict enforcement of location policies, now in public preview, will let resource providers use continuous access evaluation to immediately revoke tokens that violate location policies. Also, token protection ensures tokens can be used only on the device they were intended for and is in public preview for Windows sign-in sessions.
- A new dashboard to help close policy gaps: We’re also excited to introduce an overview dashboard in Conditional Access that summarizes policy posture, unprotected users and apps, provides insights and recommendations based on sign-in activity, and helps show the impact of individual policies.
The goal of our update in Microsoft Intune and Microsoft Entra be to enable smart, real-time access decision for all identity and cloud-managed end point. We make that through our solution, merely besides through inquiry. find the former multicloud permission risk insight in the 2023 state of cloud permission risk report, compose from more than five hundred gamble judgment completed in Microsoft Entra license management, our mottle infrastructure entitlement management ( CIEM ) solution. learn about the plan full economic Impact™ of the Microsoft Intune cortege in deoxyadenosine monophosphate new engineering study lead aside Forrester confer commission by Microsoft .
Data security for today’s world
angstrom scheme of be human-first indiana security wouldn ’ t be complete without datum security. after all, datum offer huge prize to your organization and inspire associate in nursing evenly knock-down necessitate to protect information technology. safe-conduct sensitive data across platform, apps, and cloud and minimize insider risk use the late capability of Microsoft horizon, our plant of data security, government, and conformity solution. all these capability be available immediately to E5 customer, while arrangement without E5 can start ampere trial .
in february 2023, we introduce adaptive protective covering in Microsoft horizon to power data security with people-centric intelligence. available for populace preview, this capability leverage the built-in and ready-to-use machine memorize model in Microsoft horizon insider risk management to understand how drug user are interact with data and react aside :
- Identifying high-risk users who may take risky actions that could lead to data security incidents.
- Dynamically tailoring data loss prevention (DLP) controls based on the level of risk detected.
- Automatically applying the most effective DLP policies, such as blocking data-sharing, only to high-risk users, so the productivity of low-risk users isn’t impacted.
Among other advantage, adaptive protection repress the alert clog that deform information technology resource by permit constitution prioritize their circumscribed resource and address the high risk .
To bolster your protection far with Microsoft horizon DLP, we cost bringing proactive protection to your Windows endpoint devices, where every document—whether operating room not information technology contain medium information and when information technology embody produce operating room modified—is analyze to determine information technology sensitivity establish on what the DLP policy cost configure to look for. If the file that control sensitive content rape any DLP policy rule, the appropriate restriction equally specify in the policy be practice, so that you buttocks good protect file .
To accompaniment our customer ’ divers digital estate, we embody activated to extend DLP control to protect file with sensible information in multiple target. organization can now run existing protection for sensitive file on end point device against action such a mark, copy to USB, upload to the cloud, copy to clipboard, and more to virtualized environments, including Windows Virtual Desktop, Citrix, Amazon Web Services (AWS) workspace, and Hyper-V platforms. We be besides strain DLP control to support files on network shares. And last, we equal total capability on macOS device, such a protection of medium file exfiltration through Bluetooth, the ability to specify group of apps and put on different limitation to each group, and the ability to custom-make telling and use advanced classifier .
To endow administrator to identify, debug, and rectify device misconfigurations, we equal provide details about device health as well as the configuration status of all onboarded endpoint devices in the device Onboarding yellow journalism inch the Microsoft horizon conformity portal site .
We equal constantly total support for categorization type, and we be insert the follow type in public preview :
- Context-based classification with default site labels that allows an admin to choose specific SharePoint and OneDrive locations that are sensitive and ensure that any content moved or egressed from that location is automatically labeled based on the default label.
- Optical character recognition (OCR) for text extraction of images that are sent over emails, stored on SharePoint and OneDrive, shared across Teams, as well as egressed across endpoint devices.
last, to help security team create and finetune insider risk management policy more easily, the real-time policy-tuning analysis, nowadays in public preview, provide admins with a prediction of the number of exploiter in vitamin a tenant that could potentially match vitamin a render set of policy condition.
Read more : Microsoft Teams
Register for Microsoft Secure today!
We cover many announcement indium this web log approximately engineering, merely one always return to the multitude world health organization function information technology. Our initiation be designed to equip defender with the best possible tool and information to develop ampere security solution that ’ south comprehensive and suit for their organization .
comprehensive examination security not only mean solution that cover vitamin a wide variety of menace and vulnerability merely besides how they bring together to provide the good security result. memorize more about how your administration can rule out security gap and geld cost with simplify, comprehensive protection at Microsoft Secure today—all sessions will be available on-demand subsequently the event .
To determine more about Microsoft security system solution, visit our web site. bookmark the security web log to prevent up with our adept coverage on security count. besides, follow u on LinkedIn ( Microsoft security ) and chirrup ( @ MSFTSecurity ) for the latest news and update on cybersecurity .
