Skip to main content
Skip to main content
Security
Sign in

ransomware

Featured image for Automating threat actor tracking: Understanding attacker behavior for intelligence and contextual alerting

Automating threat actor tracking: Understanding attacker behavior for intelligence and contextual alerting

A probabilistic graphical modeling framework used by Microsoft 365 Defender research and intelligence teams for threat actor tracking enables us to quickly predict the likely threat group responsible for an attack, as well as the likely next attack stages.
Read more Automating threat actor tracking: Understanding attacker behavior for intelligence and contextual alerting
Featured image for Analyzing attacks taking advantage of the Exchange Server vulnerabilities

Analyzing attacks taking advantage of the Exchange Server vulnerabilities

Microsoft continues to monitor and investigate attacks exploiting the recent on-premises Exchange Server vulnerabilities. As organizations recover from this incident, we continue to publish guidance and share threat intelligence to help detect and evict threat actors from affected environments.
Read more Analyzing attacks taking advantage of the Exchange Server vulnerabilities
Featured image for Sophisticated new Android malware marks the latest evolution of mobile ransomware

Sophisticated new Android malware marks the latest evolution of mobile ransomware

We found a piece of a particularly sophisticated Android ransomware with novel techniques and behavior, exemplifying the rapid evolution of mobile threats that we have also observed on other platforms.
Read more Sophisticated new Android malware marks the latest evolution of mobile ransomware
Over the shoulder photo at a dining room table with a Lenovo ThinkPad X1 Yoga. Featured image for Microsoft Digital Defense Report 2020: Cyber Threat Sophistication on the Rise

Microsoft Digital Defense Report 2020: Cyber Threat Sophistication on the Rise

A new report from Microsoft shows it is clear that threat actors have rapidly increased in sophistication over the past year, using techniques that make them harder to identify.
Read more Microsoft Digital Defense Report 2020: Cyber Threat Sophistication on the Rise
Featured image for Inside Microsoft Threat Protection: Attack modeling for finding and stopping lateral movement

Inside Microsoft Threat Protection: Attack modeling for finding and stopping lateral movement

Microsoft Threat Protection uses a data-driven approach for identifying lateral movement, combining industry-leading optics, expertise, and data science to deliver automated discovery of some of the most critical threats today.
Read more Inside Microsoft Threat Protection: Attack modeling for finding and stopping lateral movement
Featured image for Ransomware groups continue to target healthcare, critical services; here’s how to reduce risk

Ransomware groups continue to target healthcare, critical services; here’s how to reduce risk

Multiple ransomware groups that have been accumulating access and maintaining persistence on target networks for several months activated dozens of ransomware deployments in the first two weeks of April 2020.
Read more Ransomware groups continue to target healthcare, critical services; here’s how to reduce risk
Featured image for Microsoft works with healthcare organizations to protect from popular ransomware during COVID-19 crisis: Here’s what to do

Microsoft works with healthcare organizations to protect from popular ransomware during COVID-19 crisis: Here’s what to do

Microsoft identified several dozens of hospitals with vulnerable gateway and VPN appliances. We sent these hospitals a first-of-its-kind notification with important info about the vulnerabilities, how attackers can take advantage of them, and a strong recommendation to apply security updates.
Read more Microsoft works with healthcare organizations to protect from popular ransomware during COVID-19 crisis: Here’s what to do
Featured image for Secured-core PCs: A brief showcase of chip-to-cloud security against kernel attacks

Secured-core PCs: A brief showcase of chip-to-cloud security against kernel attacks

Secured-core PCs combine virtualization, operating system, and hardware and firmware protection. Along with Microsoft Defender ATP, Secured-core PCs provide end-to-end protection against advanced attacks that leverage driver vulnerabilities to gain kernel privileges.
Read more Secured-core PCs: A brief showcase of chip-to-cloud security against kernel attacks
Featured image for Human-operated ransomware attacks: A preventable disaster

Human-operated ransomware attacks: A preventable disaster

In human-operated ransomware attacks, adversaries exhibit extensive knowledge of systems administration and common network security misconfigurations, perform thorough reconnaissance, and adapt to what they discover in a compromised network.
Read more Human-operated ransomware attacks: A preventable disaster
Featured image for CISO series: Partnering with the C-Suite on cybersecurity

CISO series: Partnering with the C-Suite on cybersecurity

In my last blog, we looked at five communication techniques that can help engage business managers in the work of cybersecurity. This week, we’ll look at how to use those techniques to bring the C-Suite into the conversation.
Read more CISO series: Partnering with the C-Suite on cybersecurity