Windows 10: Greater protection and control with three new Gmail security tools

Brink · Jun 26, 2019

What’s changing

We’re making three Gmail security features generally available (GA). The features were previously in beta. Check out the linked announcements for more information on each:

Security sandbox, which detects the presence of previously unknown malware in attachments by virtually "executing" them in a private, secure sandbox environment. Learn more.

Advanced phishing and malware protection, which provides new controls to place emails into a quarantine, protect against anomalous attachment types, and protect your Google Groups from inbound spoofing emails. Learn more.

Gmail confidential mode, which provides built-in information rights management controls in your emails by allowing senders to create expiration dates and revoke previously sent messages. Learn more.

Who’s impacted

Admins and end users

Why you’d use it

When you deploy and manage security tools at scale, you can more effectively protect your users from threats. With these features now in GA, everyone in your organization—from admins to end users—is more secure.

How to get started

Admins:

Security sandbox: Note: available to G Suite Enterprise and G Suite Enterprise for Education editions only. Find and turn on the beta security sandbox feature at Admin console > Menu > Apps > G Suite > Gmail > Advanced settings. Use our Help Center to find more information on how to detect harmful attachments.

Advanced phishing and malware protection: Find and control these features at Admin console > Menu > Apps > G Suite > Gmail > Safety. You’ll find new options for anomalous attachment and groups spoofing protections, and see the quarantine option available for all controls. Use our Help Center to learn more about how to enhance phishing and malware protection.

Gmail confidential mode: This feature is on by default so no action is required to get started. To disable the feature, navigate to Admin console > Apps > G Suite > Settings for Gmail > User settings.

End users:

Security sandbox: No action needed.

Advanced phishing and malware protection: No action needed.

Gmail confidential mode: Follow the steps in this Help Center article to send and open confidential emails.

Helpful links

Cloud blog: New G Suite security protections to guard against security attacks

G Suite Updates blog: Increase email security with the security sandbox for Gmail beta

G Suite Updates blog: Advanced phishing and malware protection for Gmail beta

G Suite Updates blog: Gmail confidential mode launching on by default on June 25, 2019

Availability

Rollout details

Security Sandbox

Rapid Release domains: Full rollout (1-3 days for feature visibility) staring on June 25, 2019.

Scheduled Release domains: Full rollout (1-3 days for feature visibility) staring on June 25, 2019.

Advanced phishing and malware protection

Rapid Release domains: Extended rollout (potentially longer than 15 days for feature visibility) starting on June 25, 2019.

Scheduled Release domains: Extended rollout (potentially longer than 15 days for feature visibility) starting on June 25, 2019.

Gmail confidential mode

Rapid Release domains: Full rollout (1-3 days for feature visibility) staring on June 25, 2019.

Scheduled Release domains: Full rollout (1–3 days for feature visibility) starting on June 25, 2019.

G Suite editions

Security Sandbox

Available to G Suite Enterprise and G Suite Enterprise for Education.

Not available to G Suite Basic, G Suite Business, G Suite for Education, and G Suite for Nonprofits.

Advanced phishing and malware protection

Controls are available to all G Suite editions.

Chart to view affected emails available is part of the security center and so is available to G Suite Enterprise and G Suite Enterprise for Education editions only.

Gmail confidential mode:

Available to all G Suite editions.

On/off by default?

Security sandbox: This feature will be OFF by default and can be enabled at the OU level.

Advanced phishing and malware protection: This feature will be ON by default.

Gmail confidential mode: This feature will be ON by default.

Click to expand...

Source: https://gsuiteupdates.googleblog.com...fidential.html

:)

Brink · Jun 26, 2019

Google adds new security updates to Gmail

Keeping company data secure is priority one, and that starts with protecting the tools that your employees use every day. We’re constantly adding security features to help businesses stay ahead of potential threats, and are excited to announce new security features for Gmail customers, including early phishing detection using machine learning, click-time warnings for malicious links, unintended external reply warnings and built-in defenses against new threats.

New machine learning models in Gmail to block phishing

Machine learning helps Gmail block sneaky spam and phishing messages from showing up in your inbox with over 99.9 percent accuracy. This is huge, given that 50-70 percent of messages that Gmail receives are spam. We’re continuing to improve spam detection accuracy with early phishing detection, a dedicated machine learning model that selectively delays messages (less than 0.05 percent of messages on average) to perform rigorous phishing analysis and further protect user data from compromise.

Our detection models integrate with Google Safe Browsing machine learning technologies for finding and flagging phishy and suspicious URLs. These new models combine a variety of techniques such as reputation and similarity analysis on URLs, allowing us to generate new URL click-time warnings for phishing and malware links. As we find new patterns, our models adapt more quickly than manual systems ever could, and get better with time.

New warnings for employees to prevent data loss

When employees are empowered to make the right decisions to protect data, it can improve an enterprise’s security posture. To help with this, Gmail now displays unintended external reply warnings to users to help prevent data loss. Now, if you try to respond to someone outside of your company domain, you’ll receive a quick warning to make sure you intended to send that email. And because Gmail has contextual intelligence, it knows if the recipient is an existing contact or someone you interact with regularly, to avoid displaying warnings unnecessarily.

Protecting your business with the latest security advancements

Security threats are constantly evolving and we’re always looking for ways to help people protect their data. With new built-in defenses against ransomware and polymorphic malware, Gmail now blocks millions of additional emails that can harm users. We classify new threats by combining thousands of spam, malware and ransomware signals with attachment heuristics (emails that could be threats based on signals) and sender signatures (already marked malware).

Outside of today’s updates, here are a few other security advancements we’ve made within Gmail to make sure you stay protected:

Hosted S/MIME, to encrypt email while in transit

Data Loss Prevention for Gmail, to protect your most sensitive information

Alerts when TLS encryption between mailboxes is not supported or when a message can’t be authenticated, so you’re aware when you email someone whose mailbox does not support encryption

Whirlpool, PWC and Woolworths are just a few companies that rely on Gmail to securely collaborate. Learn more.

Written by: Andy WenSenior
Product Manager, Counter Abuse Technology
Click to expand...

Source: Keeping your company data safe with new security updates to Gmail

Brink · Jun 26, 2019

Ensuring your security and privacy within Gmail

We make it possible for applications from other developers to integrate with Gmail—like email clients, trip planners and customer relationship management (CRM) systems—so that you have options around how you access and use your email. We continuously work to vet developers and their apps that integrate with Gmail before we open them for general access, and we give both enterprise admins and individual consumers transparency and control over how their data is used.

You can visit the Security Checkup to review what permissions you have granted to non-Google apps, and revoke them if you would like. For G Suite users, admins can control which non-Google apps can access their users’ data through whitelisting.

Keeping your data secure is our top priority, so we want to provide you with details about our vetting process and user controls for both enterprise and consumer accounts:

Giving consumers choice and protecting them from malicious or deceptive apps

A vibrant ecosystem of non-Google apps gives you choice and helps you get the most out of your email. However, before a published, non-Google app can access your Gmail messages, it goes through a multi-step review process that includes automated and manual review of the developer, assessment of the app’s privacy policy and homepage to ensure it is a legitimate app, and in-app testing to ensure the app works as it says it does.

In order to pass our review process, non-Google apps must meet two key requirements:

Accurately represent themselves: Apps should not misrepresent their identity and must be clear about how they are using your data. Apps cannot pose as one thing and do another, and must have clear and prominent privacy disclosures.

Only request relevant data: Apps should ask only for the data they need for their specific function—nothing more—and be clear about how they are using it.

We review non-Google applications to make sure they continue to meet our policies, and suspend them when we are aware they do not.

You control your data

Transparency and control have always been core data privacy principles, and we're constantly working to ensure these principles are reflected in our products.

Before a non-Google app is able to access your data, we show a permissions screen that clearly shows the types of data the app can access and how it can use that data.

We strongly encourage you to review the permissions screen before granting access to any non-Google application.

In addition, we’ve long had data controls that you can use at any time to manage your information. For example, the Security Checkup shows all non-Google apps that have access to your data and flags potentially risky apps so you can revoke any previously-granted permissions that you are no longer comfortable with. You can also view and control permissions within myaccount.google.com under “Apps with account access.”

Providing tools for G Suite admins

G Suite admins can control the scopes of data users are able to grant non-Google apps access to by whitelisting connected OAuth apps. This ensures that G Suite users can give access only to non-Google OAuth apps that have been vetted and are trusted by their organization.

Providing industry-leading security and intelligence in Gmail

Gmail has world-class safety features, such as protections that allow us to prevent more than 99.9% of spam and phishing emails from reaching your inbox. In order to deliver these features, we conduct automatic processing of emails. This is standard practice across the industry, and also allows us to give you intelligent features like Smart Reply that help you be more productive.

We do not process email content to serve ads, and we are not compensated by developers for API access. Gmail’s primary business model is to sell our paid email service to organizations as a part of G Suite. We do show ads in consumer Gmail, but those ads are not based on the content of your emails. You can adjust your ads settings at any time.

The practice of automatic processing has caused some to speculate mistakenly that Google “reads” your emails. To be absolutely clear: no one at Google reads your Gmail, except in very specific cases where you ask us to and give consent, or where we need to for security purposes, such as investigating a bug or abuse.

The work of privacy and security is never done, and we’re always looking for ways to better protect our users. For example, we’ve recently introduced more transparency into your Google Account, greater control over your ads settings, and added new OAuth protections to guard against malicious apps. We continuously make announcements about how we’re improving our protections—keep up to date with the latest on the Safety & Security section of our blog, and visit privacy.google.com for more information about our privacy and security commitments.
Click to expand...

Source: Ensuring your security and privacy within Gmail

Brink · Jun 26, 2019

Stepping up protection with intelligent security

With digital transformation, technology becomes increasingly central to every business and organization. This makes ensuring cybersecurity increasingly important. And, as employees increase their use of mobile devices and cloud-based apps, protecting their work requires a new approach for IT. With 80% of employees admitting to the use of non-approved cloud apps for work, ensuring data protection cannot be left to employees to manage.

To address these needs, Microsoft continues to take a multi-faceted approach to providing built-in security capabilities. These span areas across:

Protecting at the front door

Protecting data anywhere

Achieving data security compliance objectives

Detecting and recovering from attacks

Managing the security tool set

The Microsoft security tools continuously improve with insight from the Microsoft Intelligent Security Graph, which serves as the connective tissue across Microsoft security solutions. Today at Ignite, we are announcing new integrations, expanded capabilities, and partnerships toward addressing the complex areas of cybersecurity for all organizations.

Protect at the front door

The vast majority of security breaches continue to trace back to weak or stolen passwords. Because it’s proving to work, attackers are increasing their focus on stealing passwords to access corporate systems. The latest Microsoft Security Intelligence Report shows a 300 percent increase in user account attacks. To address this growing issue, it is essential to focus on securing identities and access. Our cloud-based approach is through broadly implemented conditional access.

Conditional access enables you to control who has access to your organization’s resources based on a combination of risk factors, such as user account activity, physical location, and the trustworthiness of the device. Azure Active Directory analyzes these factors and applies continuous cybersecurity threat intelligence, powered by Microsoft’s Intelligent Security Graph. This insight provides real-time risk assessment, and triggers the appropriate authentication requirements needed for accessing apps and data. Today, we are expanding conditional access capabilities by integrating with Microsoft Cloud App Security, Azure Information Protection, and our partners in the ecosystem:

Microsoft Cloud App Security performs real-time monitoring and helps IT gain control over cloud apps and how employees use these apps. Now with Cloud App Security, users’ actions taken in cloud applications can be managed and controlled based on conditional access policies and proxy-enforced session restrictions. For example, you can allow users to access cloud apps from an unfamiliar location or unmanaged device, but prevent them from downloading documents.

To further enhance security at the file level, we’re introducing conditional access for sensitive files. With the integration of Azure Information Protection and Azure Active Directory, conditional access can be set up to allow or block access to documents protected with Azure Information Protection. You can also enforce additional security requirements such as multi-factor authentication or device enrollment.

Not only are we providing better integration within our own solutions to deliver holistic and identity-driven security, we also are working with our partners to extend conditional access in the ecosystem. In addition to Azure multi-factor authentication (MFA), you can now use RSA, Duo or Trusona for two-step authentication as part of your conditional access policy.

Protect your data anywhere

Employees are using more SaaS apps, creating more data, and working across multiple devices. While this has enabled people to do more, it has also increased the risk of data loss – it is estimated that 58% of workers have accidentally shared sensitive data with the wrong person.

Microsoft’s Information Protection solutions help you detect, classify, protect and monitor your data – regardless of where it is stored or shared. Today, we’re announcing several new investments in the integration across our information protection solutions – helping provide more comprehensive protection across the data lifecycle.

A key part of this vision is to provide a more consistent and integrated classification, labeling and protection approach across our information protection technologies, enabling persistent protection of your data – everywhere. Microsoft Cloud App Security natively integrates with Azure Information Protection to classify and label files that reside in cloud applications.

Finally, we are announcing the general availability of improvements to Office 365 message encryption, which makes it easier to share protected emails with anybody – inside or outside of your organization. Recipients can view protected Office 365 emails on a variety of devices, using common email clients or even consumer email services such as Gmail and Outlook.com.

Achieve your data security compliance objectives

Regulated organizations have additional needs to demonstrate compliance, and we’re investing in tools to help achieve those goals.

Customer Key can help regulated customers meet their security compliance obligations by providing added control and management of encryption keys. To learn more, check out this of how Customer Key works in SharePoint Online.

Beyond just security compliance, achieving organizational compliance is a complex challenge. It’s hard to stay up-to-date with all the regulations that matter to your organization, and to define and implement controls with limited in-house capability. We’re pleased to introduce the upcoming preview of Compliance Manager, which enables you to manage your compliance posture from one place and stay up-to-date on evolving data protection regulations. Compliance Manager enables real-time risk assessment with one intelligent score reflecting your compliance posture against data protection regulations when using Microsoft cloud services. It also provides recommended actions and step-by-step guidance to help you improve your compliance posture.

Detect and recover from attacks

On average breaches exist for over 90 days in a customer’s environment before they are detected. In response, many organizations are moving to an assume breach posture. We continue to invest in tools that help detect attacks sooner and then remediate. But, we know it’s also important to continue investing in pre-breach attack prevention tools.

Today, we are announcing several new capabilities to further improve our anti-phishing capabilities in Office 365 Advanced Threat Protection, with a focus on mitigating content phishing, domain spoofing, and impersonation campaigns. Office 365 Advanced Threat Protection is also expanded to help secure SharePoint Online, OneDrive for business, and Teams. In Office 365 Threat Intelligence, we have introduced threat insights and tracking to help with detection and remediation. In Windows, we are adding Windows Defender Application Control, which is powered by the Microsoft Intelligent Security Graph to make it less likely that malicious code can run on the endpoint.

On the post-breach detection side, we are announcing the limited preview of a brand-new service – Azure Advanced Threat Protection for users – that brings our on-premises identity threat detection capabilities to the cloud and integrates them with the Microsoft Intelligent Security Graph. Powered by the graph, our Advanced Threat Protection products have a unified view of security event data so your security operations analysts can investigate an incident from endpoint to end-user to e-mail. Finally, as previously announced earlier in the month, Windows Defender Advanced Threat Protection is integrating Hexadite’s AI technology to automatically investigate new alerts, determine the complexity of a threat, and take the necessary actions to remediate it.

Security management

Protecting resources across distributed infrastructure against evolving cyberthreats demands a new approach to security management – a solution that provides comprehensive visibility, consistent controls and actionable intelligence and guidance.

We are announcing today that Azure Security Center, which helps customers protect workloads running in Azure against cybersecurity threats, can now also be used to secure workloads running on-premises and in other private and public clouds. Azure Security Center reduces management complexity by delivering visibility and control over workloads across clouds, enables adaptive threat prevention to reduce your exposure to threats, and provides intelligent detection to help you keep pace with rapidly evolving cyberattacks.

Azure Security Center also has new capabilities to enable central management of security policies, better detect and defend against advanced threats, and streamline investigation of threats for your hybrid workloads. Read the Azure blog to learn more about these and other new features.

Getting started

We have made it easier than ever to get end-to-end security solutions up and running. FastTrack for Microsoft 365 now provides deployment services for key security scenarios, giving you the resources, tools, and support you need from Microsoft engineers.

FastTrack for Microsoft 365 can work with you directly, work with your existing partner, or help you get matched with a trusted Microsoft partner to deploy comprehensive security solutions. And the best part is this isn’t a one-time benefit. It is a repeatable resource that you can use to ensure you have the help and resources you need.

You can go to fasttrack.microsoft.com and get help to deploy Microsoft products to address some of the most common security scenarios including:

Working securely from anywhere, anytime on almost any device enabling a flexible workstyle

Protect your data on files, apps and devices within and across orgs

Detect and protect against external threats

Protect your users and their accounts

Securely collaborate on documents in real time

Julia White
Corporate Vice President, Microsoft Azure & Security
Click to expand...

Source: Stepping up protection with intelligent security | Microsoft Secure Blog

Windows 10: Greater protection and control with three new Gmail security tools

Greater protection and control with three new Gmail security tools

Greater protection and control with three new Gmail security tools

Greater protection and control with three new Gmail security tools

Greater protection and control with three new Gmail security tools - Similar Threads - Greater protection control

Protecting security

security protection

New Gmail email security with TLS by default and other new features

Security protection

Project Everest: Greater heights in internet communication security

Security protection

Testing Firefox Monitor, a New Security Tool

HP Protect Tools Security Manager

Google adds new security updates to Gmail