Microsoft Defender to Block Credential Theft By Default on Windows PCs

Microsoft is getting ready to enable a new security feature in Microsoft Defender that should make it more difficult for threat actors to steal credentials from Windows PCs. The company says that the Attack Surface Reduction (ASR) security rule will help to prevent admin-level hackers from accessing the Local Security Authority Server Service (LSASS) process. […] Continue reading Microsoft Defender to Block Credential Theft By Default on Windows PCs

Microsoft Defender App Launches in Preview on Windows and Android

Microsoft has launched a new Microsoft Defender Preview app for Windows and Android devices. This is currently available to download in the United States, but the company plans to expand its availability to all users worldwide later this year. The new Microsoft Defender Preview app is a centralized security solution that allows users to control […] Continue reading Microsoft Defender App Launches in Preview on Windows and Android

Microsoft Defender Exclusions List Can Be Read by Attackers in Windows 10

Security researchers have discovered a flaw in Microsoft Defender Antivirus that could allow attackers to bypass the malware detection solution on Windows machines. According to a report from Bleeping Computer, this issue specifically impacts Windows 10 devices running version 21H1 and 21H2. Microsoft Defender is the default anti-malware software, which scans files and processes to […] Continue reading Microsoft Defender Exclusions List Can Be Read by Attackers in Windows 10

Microsoft Advises Customers to Patch Active Directory Privilege Escalation Vulnerability

Last month, Microsoft released the November Patch Tuesday updates to address two Active Directory (AD) Domain Services privilege escalation security flaws affecting all supported versions of Windows Server. But it looks like some customers have not updated their servers yet. The company published a blog post yesterday advising customers to install the emergency fixes on […] Continue reading Microsoft Advises Customers to Patch Active Directory Privilege Escalation Vulnerability

How to Secure Unmanaged Devices with Microsoft Defender for Endpoint

Security Management with Microsoft Defender for Endpoint is a new feature that can be used to apply security configuration to devices that do not enroll into Microsoft Endpoint Manager. In this scenario, Microsoft Defender for Endpoint retrieves, enforces, and reports on policies deployed via Microsoft Endpoint Manager. The devices are joined to your Azure Active […] Continue reading How to Secure Unmanaged Devices with Microsoft Defender for Endpoint

How to Deploy Microsoft Defender Application Control (Previously WDAC)

Previously known as Windows Defender Application Control (WDAC), Microsoft Defender Application Control (MDAC) is now even more accessible to organizations through the removal of the Windows 10 Enterprise / Education requirement. Now, organizations using Windows 10 and Windows 11 Professional are able to leverage the feature to gain greater insight and control of their Windows […] Continue reading How to Deploy Microsoft Defender Application Control (Previously WDAC)

Microsoft Defender for Business Brings Enterprise-Grade Endpoint Security to SMEs

Security On November 2nd 2021, Microsoft announced Microsoft Defender for Business. The announcement comes following a series of rebranding exercises into the “Microsoft Defender for” fold. What is Microsoft Defender for Business? Microsoft Defender for Business is a new endpoint security solution that will be available soon in preview. Defender for Business is designed to […] Continue reading Microsoft Defender for Business Brings Enterprise-Grade Endpoint Security to SMEs

Using Microsoft 365 Defender Threat Analytics to Improve Security

In this article, I’m going to describe how to use Microsoft 365 Defender Threat Analytics to improve security in your organization. Over three Petri articles, we’ve dived into what Microsoft Defender for Endpoint (MDE) is, how you can migrate to it, and how it should be configured. Part 1: Understanding Microsoft Defender for Endpoint and […] Continue reading Using Microsoft 365 Defender Threat Analytics to Improve Security

Microsoft Defender for Endpoint – Important Service and Endpoint Settings You Should Configure Right Now

Microsoft Defender for Endpoint (MDE) is much more than a traditional antivirus service. Now being offered in Plan 1 and Plan 2, the full offering you get with Plan 2 not only provides antivirus capabilities but also extended detection and response, attack surface reduction rules to harden the OS against common threat mechanisms, and threat […] Continue reading Microsoft Defender for Endpoint – Important Service and Endpoint Settings You Should Configure Right Now