Patch Tuesday for September saw Microsoft addressing 65 vulnerabilities this month – including 2 zero-day vulnerabilities, 4 critical remote code execution (RCE) vulnerabilities, and 6 republished third-party vulnerabilities.

Multi-tenant environments add an additional layer of complexity to today’s ever-evolving threat landscape. Whether organizations have grown through acquisition, or have strategically implemented multi-tenant setups, navigating across multiple environments is no small task. Mundane and repetitive tasks require security operations center (SOC) teams to log in and out of each customer environment individually. This not […]

Ensuring seamless integration and alignment between Microsoft Sentinel’s Analytics Rules and Data Collection Rules (DCR) is paramount for effective threat detection and response. However, a recurring challenge many organizations face is verifying that the Event IDs in their Analytics Rules are indeed covered by their DCRs. This alignment is crucial because any discrepancy can lead to missed detections or […]

With the growing reliance on web applications and digital platforms, the use of application programming interfaces (APIs) has become increasingly popular. If you aren’t familiar with the term, APIs allow applications to communicate with each other and they play a vital role in modern software development.

Get technical details about how this new attack campaign is delivered via Microsoft Teams and how to protect your company from this loader malware.

Below is an article comparing the threat hunting experience in Microsoft Sentinel vs Microsoft 365 Defender. SPOLER ALERT: Microsoft Sentinel excels in many/every aspects of threat hunting, with the exception of cost. 🙂

Are you struggling to manage your data in Microsoft 365? Do you want to avoid losing your data, violating regulations, or wasting storage space? If so, you need to know the differences between retention, archive, and backup. These are three data management options that can help you protect your data, comply with rules, and optimize […]

CISA released an Open Source Software Security Roadmap to lay out—in alignment with the National Cybersecurity Strategy and the CISA Cybersecurity Strategic Plan—how we will partner with federal agencies, open source software (OSS) consumers, and the OSS community, to secure OSS infrastructure. To that end, the roadmap details four key goals: Establish CISA’s role in supporting the security […]

This blog will explain how you can easily hide the password option from the login screen in Windows 11 and make sure to require your users to work passwordless during the Windows Sign-in as well (this without removing the password credential provider)!

The purpose of this repository is to share KQL queries that can be used by anyone and are understandable. These queries are intended to increase detection coverage through the logs of Microsoft Security products. Not all suspicious activities generate an alert by default, but many of those activities can be made detectable through the logs. […]