Windows 10: New cybersecurity options from Microsoft Security ahead of RSAC19

Brink · Mar 4, 2019

I’m on my way to the RSA Conference in San Francisco, California, and am looking forward to connecting with our customers and partners there. We have a lot to talk about. Last week, Ann Johnson announced two new services that we now offer to help empower our customers as they deal with the industry-wide cybersecurity talent crunch: Microsoft Azure Sentinel and Microsoft Threat Experts. Today, I’m excited to share more news about our work in security.

Leading integration across the industry

In the face of the cybersecurity talent shortage, our customers are increasingly reliant on their tools working together. We are part of a broad, heterogeneous ecosystem of technology providers, and we take seriously our responsibility to lead integration across them.

We’ve made progress to report on three fronts:

There are now 50 partners participating in the Microsoft Intelligent Security Association, a group of technology providers who have integrated their solutions with Microsoft products to provide customers better protection, detection, and response. New members include: Sophos, Citrix, Adobe, and Symantec.

The Microsoft Graph Security API now has new capabilities that allow you to share threat indicators to extend detection, easily invoke powerful investigation and remediation activities, and build better connected security apps and workflows without the need to code.

Azure Active Directory (Azure AD), which already provides authentication for more than 810,000 applications for our enterprise customers, now integrates with several Zscaler applications. With both Azure AD and Zscaler supporting the SCIM 2.0 standard, our joint customers can now use the Azure AD provisioning service to automate the lifecycle of user and group accounts, giving you a more secure and scalable way to allow user access to Zscaler applications.

Added security controls for Azure and Microsoft 365

In our own security products, we continue to invest heavily in capabilities that take advantage of the cloud and artificial intelligence (AI) to empower your team and let them focus on the most important tasks to protect against threats and keep information secure. We made several key strides in security to strengthen protection for our customers:

Threat intelligence-based filtering is now available for Azure Firewall. This addition enables customers to alert or deny traffic from/to malicious IP addresses and domains based on the near real-time data feed powered by the Microsoft Intelligent Security Graph.

Azure Security Center now leverages machine learning to reduce the attack surface of internet-facing virtual machines, and its application whitelisting controls have been extended to Linux and on-premises servers. The network map in Azure Security Center extends support for Virtual Network peering, a commonly used networking configuration in which traffic flows between Azure Virtual Networks through the Microsoft backbone.

Microsoft Threat Protection now provides automated investigation and remediation in the Microsoft Security Center, a unified console that helps SecOps teams spend their limited time on the most high-value tasks, like proactive hunting and strategic improvements.

We are extending our unique, native integration between Microsoft Cloud App Security and Azure AD conditional access. Out-of-the box templates now enable organizations to configure some of our most popular policies, such as blocking the download of sensitive content in real-time, within seconds.

New native capabilities in the Microsoft Office 365 version of Office client applications help document and email authors apply the right classification and sensitivity labels, helping you ensure information is protected in accordance with your organization’s policies.

Securing the Internet of Things (IoT)

IoT deployments can help organizations cut costs with predictive maintenance or to create new revenue streams from connected products. Unfortunately, the security pro talent shortage makes it difficult to successfully plan the IoT security controls necessary. We worked with the Industrial Internet Consortium to produce a new IoT Security Maturity Model that provides clear industry best practices for evaluating your IoT risk profile and planning the remediation you need. We’ve also added a new deployment method to Azure Sphere to help you reduce risk across your entire fleet of IoT devices. The new guardian modules built on Azure Sphere bring the security of Azure Sphere to brownfield IoT devices, allowing your business groups to complete IoT deployments without increasing risk for your organization.

Connect with us at RSA

I’m proud to be part of the team driving all this innovation, but technology is not a silver bullet. Its role is simply to empower you—the defenders. On Wednesday, March 6, at 10:30 AM PST, Ann Johnson will speak in her keynote about other ways we, as an industry, can empower people. I encourage you to attend, if you’re at the conference. You can learn more about Microsoft security at booth 6059. We’d love to connect with you there, or in one of the sessions we’ll be leading—find out more about our activities at microsoft.com/rsa.
Click to expand...

Source: Helping security professionals do more, better - Microsoft Security

:)

Cliff S · Mar 4, 2019

Nadella On Cybersecurity

A channel9 video: Satya Nadella on Cybersecurity and Microsoft’s new Cyber Defense Operations Center

In this special Taste of Premier episode we welcome Microsoft CEO Satya Nadella and GM of Microsoft’s Cloud Platform Julia White to discuss Microsoft’s new approach on cyber and operational security in our mobile-first, cloud-first world.

[1:48] Microsoft's approach to cybersecurity – Our mission

[4:50] Cybersecurity in 2015 and beyond – What does the landscape look like and how can we overcome these challenges?

[15:08] Microsoft's new security posture – Platform. Intelligence. Partners.

[18:40] DEMO: Microsoft new cybersecurity platform – addressing cybersecurity thefts

Passwords and Windows Hello

SaaS applications and Azure Active Directory

Protection from Malware with Office 365

Downloading apps from the web and Windows 10 Device Guard

Pass-the-Hash (PtH) and Windows 10 Credential Guard

Protection from Data loss with Windows Intune and Windows 10

Monitor and Detect Identity Theft with Microsoft 's Advanced Threat Analytics

Securing your entire Infrastructure (on-premise and in the cloud) with Azure Security Center

[38:41] Our Security Platform – Windows 10, Microsoft Azure and Office 365

[43:40] Microsoft's New Cyber Defense Operations Center

[47:01] Microsoft: Empowering every person & every organization on the planet to achieve more.

Need more info? Check out Microsoft.com/Security
Click to expand...

Brink · Mar 4, 2019

Cybersecurity Policy Framework

Each year, more and more governments are developing policies to address security challenges presented by an increasingly digitized world. And to support those efforts, I’m excited today to announce the release of Microsoft’s new Cybersecurity Policy Framework, a resource for policymakers that provides an overview of the building blocks of effective cybersecurity policies and that is aligned with the best practices from around the globe. Nations coming online today, and building their cybersecurity infrastructures, should not—and need not—be burdened with the stumbling blocks that characterized previous generations of cybersecurity policies. Instead, such nations should be empowered to leapfrog outdated challenges and unnecessary hurdles.

For years, Microsoft has worked with policymakers in advanced and emerging economies, and across many social and political contexts, to support the development of policies to address a wide range of cybersecurity challenges. This new publication captures and distills the important lessons learned from those years of experience partnering with governments. And as increasing numbers of countries wrestle with how to best address cybersecurity challenges, the Cybersecurity Policy Framework is an indispensable resource for the policymakers joining this work.

According to the last analysis provided by the United Nations, half of the countries on earth today either have or are developing national cybersecurity strategies. I have little doubt that in the next decade every single outstanding country will add its name to that list. And this trend highlights the importance of this new resource. The policies established today will impact how technologies are used for years to come and how safe or dangerous the online world becomes for all of us. Truly, there is no going back, only forward.

The Cybersecurity Policy Framework is not one-stop shopping for cybersecurity policymakers, but it does serve as an important “umbrella document,” providing a high-level overview of concepts and priorities that must be top of mind when developing an effective and resilient cybersecurity policy environment.

Specifically, this new resource outlines:

National strategies for cybersecurity.

How to establish a national cyber agency.

How to develop and update cybercrime laws.

How to develop and update critical infrastructure protections.

International strategies for cybersecurity.

We at Microsoft have been at this work for a long time and have developed a wide variety of resources to help those who are working to position their industries and nations to capitalize on the benefits of new technologies—so many that they can often be difficult to find! And this highlights another strength of the Cybersecurity Policy Framework, while it is not one-stop shopping, each section does provide an overview of a critical policy topic as well as links to the associated and more in-depth resources my team has developed over the years to assist policymakers. In this way, this new resource serves not only as essential, high-level guidance, but also as a key to a broader catalogue of resources built on years of experience partnering with governments around the world.

Reading through this new resource, I am proud of the work we have done in pursuit of a safer online world. Important progress has been made and these foundational principles underscore much today’s cybersecurity discourse. However, we have—and will always have—more work to do as a result of the changes and innovations in technology always on the horizon, and their implications for cybersecurity. I’m glad to put this resource forward today to support a new generation of policymakers and also look forward to partnering with them to tackle the new challenges we will face together tomorrow.

Download your copy of the Cybersecurity Policy Framework today.
Click to expand...

Source:

Building on experience: a framework for cybersecurity policy Microsoft Secure

Cybersecurity Policy Framework | Microsoft Cybersecurity

curatia · Mar 4, 2019

Microsoft Edge TLS Security

After trying everything (not a lot of steps) listed in the Microsoft Edge support site, I did a wider search and found this very simple youtube video that fixed it immediately:

For those who prefer not to click links the steps are simple:

1. Click in the Cortana search bar next to the Win 10 Start button

2. Type internet options

3. Select internet options (control panel) from the list

4. Click on the advanced tab

5. Scroll down to the security section

6. Make sure the following are all clicked:
Use SSL 3.0
Use TLS 1.0
Use TLS 1.1
Use TLS 1.2

7. Click apply

8. Refresh the page that was giving the error and it should now connect.

Hope this helps, it was a 30 second fix after hours of pounding my head against the error with the Support site suggestions.

Windows 10: New cybersecurity options from Microsoft Security ahead of RSAC19

New cybersecurity options from Microsoft Security ahead of RSAC19

New cybersecurity options from Microsoft Security ahead of RSAC19

New cybersecurity options from Microsoft Security ahead of RSAC19

New cybersecurity options from Microsoft Security ahead of RSAC19 - Similar Threads - cybersecurity options Microsoft

Azure Cybersecurity Career

Azure Cybersecurity Career

Cybersecurity innovation

Bill signed to create Cybersecurity and Infrastructure Security Agency

Cybersecurity Policy Framework

Cybersecurity Community Driving Insights into Security Solutions

Cybersecurity for SMB??

Nadella On Cybersecurity

Tips for securing your identity against cybersecurity threats