Microsoft Defender
As seen in:
Bleeping Computer,
Cult of Mac,
24tv.ua,
AsiaNet,
portalerp.com,
Techstreet Now,
The NFAPost
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Microsoft Defender
Microsoft releases one year of email security benchmark data
Microsoft has released its fourth consecutive quarterly email security benchmarking report, completing a full year of real-world performance comparisons between Microsoft Defender and competing email security vendors. The program, which began with its first report in July 2025, measures Defender against both secure email gateway vendors, known as SEGs, and integrated cloud email security vendors, known as ICES, using production threat telemetry rather than synthetic tests.
Major new Microsoft Defender update will now block one of the most dangerous kinds of cyberattack
29 minutes ago techradar.com A new feature for Microsoft Defender for Office 365 is currently being rolled out It will send all email bombing messages to the junk folder Most users should get it by the end of July 2025 Email bombing, one of the more dangerous cybercrime tactics, will now automatically be identified and mitigated in Office 365 thanks to a new Microsoft Defender update.
SANS Stormcast Tuesday, May 20th 2025: AutoIT Code RAT; Fake Keepass Download; Procolored Printer Software Compromise - SANS Internet Storm Center
iTunes MP3 Download RSS Feed Google Podbean Amazon Echo YouTube Spreaker Spotify Login here to join the discussion. Hello and welcome to the Tuesday, May 20th, 2025 edition of the SANS Internet its Storm Center's Stormcast. My name is Johannes Ulrich and this episode brought to you by the SANS EDU Graduate Certificate Program in Cybersecurity Leadership was recorded in Jacksonville, Florida. In today's diary, we got Xavier taking apart a remote access tool.
NVD - CVE-2025-47161
By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites.
NVD - CVE-2024-43614
By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites.
NVD - CVE-2024-38089
By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites.
Nmap 7.95 released: OS and service detection signatures galore!
Nmap Announce mailing list archives From: Gordon Fyodor Lyon <fyodor () nmap org> Date: Sun, 5 May 2024 11:15:04 -0700 Dear Nmap Community, I just arrived in San Francisco for the RSA conference and am delighted to announce our Nmap Version 7.95 release! I'm most excited that we finally tackled our backlog of OS and service detection fingerprint submissions.
NVD - CVE-2024-21322
References to Advisories, Solutions, and Tools By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites.
NVD - CVE-2024-29054
CVSS 3.x Severity and Metrics: CNA: Microsoft Corporation Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS 2.0 Severity and Metrics: Base Score: N/A NVD assessment not yet provided.
NVD - CVE-2024-21315
By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites.
Threat Actors Exploit Adobe ColdFusion CVE-2023-26360 for Initial Access to Government Servers
2023-12-04 19:05 (CET) US CERT SUMMARY The Cybersecurity and Infrastructure Security Agency (CISA) is releasing a Cybersecurity Advisory (CSA) in response to confirmed exploitation of CVE-2023-26360 by unidentified threat actors at a Federal Civilian Executive Branch (FCEB) agency. This vulnerability presents as an improper access control issue impacting Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier).
Cisco Unveils New Solution to Rapidly Detect Advanced Cyber Threats and Automate Response
News | Feeds | Email Cisco Unveils New Solution to Rapidly Detect Advanced Cyber Threats and Automate Response Sunday, April 30, 2023 News Summary: -- With unmatched visibility across the network and endpoint, Cisco Extended Detection and Response (XDR) simplifies security operations in today's hybrid, multi-vendor, multi-threat landscape. -- Cisco XDR prioritizes and remediates security incidents more efficiently using evidence-backed automation.
Cisco Unveils New Solution to Rapidly Detect Advanced Cyber Threats and Automate Response 11:00 AM EDT 4/24/2023 - Comtex SAN FRANCISCO, Apr 24, 2023 (Canada NewsWire via COMTEX News Network) -- News Summary: -- With unmatched visibility across the network and endpoint, Cisco Extended Detection and Response (XDR) simplifies security operations in today's hybrid, multi-vendor, multi-threat landscape.
DevOps threat matrix
The use of DevOps practices, which enable organizations to deliver software more quickly and efficiently, has been on the rise. This agile approach minimizes the time-to-market of new features and bug fixes. More and more companies are implementing DevOps services, each with its own infrastructure and emphasis on distinctive features. As the use of these environments increases, so does attackers’ interest.
DevOps threat matrix
The use of DevOps practices, which enable organizations to deliver software more quickly and efficiently, has been on the rise. This agile approach minimizes the time-to-market of new features and bug fixes. More and more companies are implementing DevOps services, each with its own infrastructure and emphasis on distinctive features. As the use of these environments increases, so does attackers’ interest.
Microsoft shifts to a comprehensive SaaS security solution
Software as a service (SaaS) apps are ubiquitous, hybrid work is the new normal, and protecting them and the important data they store is a big challenge for organizations.
Microsoft Patch Tuesday Φεβρουαρίου: Διορθώνει πάνω από 75 ευπάθειες
Aποκλειστική συνέντευξη με τον Γιώργο Κουταλιέρη και τον Νίκο Πεππέ για την δημιουργία συστήματος εντοπισμού των fake news. Πριν από μόλις λίγους μήνες ολοκληρώθηκαν με επιτυχία τα δύο πρώτα στάδια πιλοτικών δοκιμών του έργου SocialTruth.
Patch Tuesday – February 2023 | Rapid7 Blog
It’s Patch Tuesday again. Microsoft is addressing fewer individual vulnerabilities this month than last, but there’s still plenty to keep admins and defenders occupied. Three zero-day vulnerabilities are vying for your attention today: a lone Microsoft Publisher vulnerability as well as a couple affecting Windows itself. None is marked as publicly disclosed, but Microsoft has already observed in-the-wild exploitation of all three.
Microsoft February 2023 Patch Tuesday fixes 3 exploited zero-days, 77 flaws
Today is Microsoft's February 2023 Patch Tuesday, and security updates fix three actively exploited zero-day vulnerabilities and a total of 77 flaws. Nine vulnerabilities have been classified as 'Critical' as they allow remote code execution on vulnerable devices.
AsiaNet - View Release
AV-Comparatives Publishes Latest Enterprise and Consumer IT Security Test for Antivirus Software Leading antivirus testing lab publishes the test results of the long-term Enterprise and Consumer Main Test Series for August and September 2022 Enterprise Products put to test Acronis Cyber Protect Cloud with Advanced Security Pack; Avast Ultimate Business Security; Bitdefender GravityZone Elite; Cisco Secure Endpoint Essentials; CrowdStrike Falcon Pro; Cybereason Enterprise; Elastic Security;...
An Unconventional Windows Reverse Shell,
Hoaxshell is an unconventional Windows reverse shell, currently undetected by Microsoft Defender and possibly other AV solutions as it is solely based on http(s) traffic. The tool is easy to use, it generates it’s own PowerShell payload and it supports encryption (ssl). So far, it has been tested on fully updated Windows 11 Enterprise and Windows 10 Pro boxes (see video and screenshots).
Ultimate Comparison of Defender for Endpoint Features by OS [Updated August 2022]
This is the updated “matrix” of OS supported for the almost 80 features, services, and important components that make up Microsoft Defender for Endpoint. This follows up on my March 2022 release of the comparison. What’s new?
Microsoft Defender for Office 365 receives highest award in SE Labs Enterprise Email Security Services test
In today’s evolving threat landscape, email represents the primary attack vector for cybercrime, making effective email protection a key component of any security strategy.1 In Q1 2022, Microsoft participated in an evaluation of email security solutions, carried out by SE labs—a testing lab focused on assessing the efficacy of security solutions. In their latest Enterprise Email Security Services test, they evaluated email security vendors against a range of real-world email attack scenarios.
Додаток для захисту Microsoft Defender тепер доступний на macOS, iOS та Android
Це рішення для звичайних користувачів і воно кросплатформенне. Однак функціональність залежить від конкретної операційної системи. Цікаво Три функції, які незабаром з'являться в браузері Microsoft Edge: у конкурентів такого немає Що відомо Додаток функціонує у вигляді спрощеної панелі інструментів, яка підключається до існуючого антивірусного програмного забезпечення або реалізує додатковий захист.
AsiaNet - View Release
AV-Comparatives Releases Performance Test Report Showing the Impact of Security Software on System Performance The Independent ISO-Certified Security Testing Lab's Impact of Consumer Security Software on System Performance Results is Released AV-Comparatives, the independent ISO-certified security software evaluation lab, has released results for the April 2022 Performance Test, which evaluates the impact of anti-virus software on system performance.
AsiaNet - View Release
AV-Comparatives reveals top-performing consumer antivirus products in latest Malware Protection Test and Real-World Protection Test results AV-Comparatives, a provider of independent comparative tests and reviews for antivirus products, has released the latest security software evaluation results of its Malware Protection Test for the month of March, and the factsheet for the Real-World Protection Test, carried out between February and March.
Updated March 2022: Ultimate Comparison of Defender for Endpoint Features by Operating System
It’s been about 5 months since I last updated my comparison of Defender for Endpoint features by OS. This is a “matrix” of the tons of features, services, and important components that make up Microsoft Defender for Endpoint. Three months later, it’s overdue an update. So here it is 🙂 I’ve also decided to rename it to The Ultimate Comparison of MDE Features by OS… because renaming’s what we do, right?
Uncovering Trickbot’s use of IoT devices in command-and-control infrastructure
Skip to main content Trickbot, a sophisticated trojan that has evolved significantly since its discovery in 2016, has continually expanded its capabilities and, even with disruption efforts and news of its infrastructure going offline, it has managed to remain one of the most persistent threats in recent years. The malware’s modular nature has allowed it to be increasingly adaptable to different networks, environments, and devices.
Meta Launches Reels Globally On Facebook; Unveils New Features, Moentisation Options
Mumbai, NFAPost: Meta has expanded the availability of Facebook Reels for iOS and Android to over 150 countries across the globe, it has announced. With this, creators can now share their Instagram Reels as recommended content on Facebook. The social media major is expanding Reels for Facebook globally with a host of new features. It is introducing various ways to help creators monetise new creation tools, and more places to watch and create Facebook Reels.
Google Cloud Resources Can Now Be Protected By Microsoft Defender for Cloud
San Francisco, NFAPost: Microsoft announced that Microsoft Defender for Cloud, formerly known as Azure Security Center and Azure Defender, now also comes with native protection for Google Cloud Platform (GCP) environments, providing security recommendations and threat detection across clouds.
Corporate Companies Should Work For Welfare Of Urban Poor: C N Ashwatha Narayana
Bengaluru, NFAPost: Karnataka Minister for Higher Education and IT/BT C N Ashwatha Narayana on Thursday exhorted corporate companies to work for the welfare of the urban poor and if theri voices are not addressed there will be a threat to the social well being.
Protect against phishing with Attack Simulation Training in Microsoft Defender for Office 365
Skip to main content Sophisticated cyberattacks are on the rise, with email phishing as the most common attack vector. We’ve seen it all over the news with stories like Hafnium that targeted Exchange servers1 or the Nobelium attack against SolarWinds,2 which show just how easy it is for bad actors to distribute a malicious URL and gain sustained access to networks to install ransomware across a wide number of industries and verticals.
APIs and Best Security Practices for Microsoft Defender for Cloud Apps update: November 2021
By Omri Amdursky, Microsoft Defender for Cloud Apps Putting APIs in the forefront of security practices It’s important to know how to utilize APIs in order to work with a CASB like Microsoft Defender for Cloud Apps. Let’s explore authentication, authorization, and utilization of the Defender for Cloud Apps API to streamline and customize your cloud security experience. Why APIs?
Microsoft November 2020 Patch Tuesday fixes 112 vulnerabilities
Tag CVE ID CVE Title Severity Azure DevOps CVE-2020-1325 Azure DevOps Server and Team Foundation Services Spoofing Vulnerability Important Azure Sphere CVE-2020-16985 Azure Sphere Information Disclosure Vulnerability Important Azure Sphere CVE-2020-16986 Azure Sphere Denial of Service Vulnerability Important Azure Sphere CVE-2020-16987 Azure Sphere Unsigned Code Execution Vulnerability Important Azure Sphere CVE-2020-16984 Azure Sphere Unsigned Code Execution Vulnerability Important Azure...
InfoSec Handlers Diary Blog
Published: 2020-11-10 Last Updated: 2020-11-10 18:50:26 UTC by Renato Marinho (Version: 1) This month we got patches for 112 vulnerabilities. Of these, 17 are critical and one was previously disclosed and is already being exploited according to Microsoft. Amongst critical vulnerabilities, there is a CVSSv3 9.8 remote code execution in Windows Network File System (CVE-2020-17051). There are no details regarding the vulnerable component neither how the vulnerability could be exploited.
Microsoft Defender antivirus is expanding its reach ... to iPhone?
News But why? Photo: Microsoft Microsoft Defender, the built-in antivirus software that you would typically find baked into Windows, is coming to iPhone. Defender has already started making its way to macOS, where it provides full virus protection and the ability to scan your system for any malicious software. We’re expecting a very different experience on iPhone, however. I know what you’re thinking. Antivirus software for iPhone? Isn’t that about as useful as a seatbelt on a bicycle?
Windows Defender ATP: Onboarding your Windows 10 endpoints, do it the right way!
In the early days of onboarding Windows 10 endpoints to Windows Defender ATP you had to define a custom device configuration policy via Intune, in order to enable and register your Windows Defender ATP agents at scale. Later on the onboarding experience was improved by providing native Windows Defender ATP configuration policy via the Intune UI.
Part 2: Improve your endpoint security /w Windows Defender ATP & Microsoft Intune: Exploit Guard & SmartScreen
In my previous blog I highlighted the Security Analytics Dashboard of the Windows Defender Advanced Threat Protection and how to improve your organizations security excellence covering two improvement area’s: Windows Defender Antivirus and Windows Defender Application Guard.
Part 1: Improve your endpoint security /w Windows Defender ATP & Microsoft Intune: Windows Defender Antivirus & Application Guard
Remark: Some information relates to pre-released product (Windows 10 Insiders Preview build) which may be substantially modified before it’s commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. In my previous blog I highlighted some of the new (preview) features – Security Analytics Dashboard – of Windows Defender Advanced Threat Protection (WDATP).
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Microsoft
Contact Microsoft, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack