Security

Azure AD B2C – New phone sign in authentication method available (preview)

After being introduced for Azure Active Directory (AAD), the phone sign in authentication method is now being available (in preview) for Azure Active Directory Business to Consumer (AAD B2C). This allows you to setup authentication method allowing your consumer users to authenticate using their phone number and one one-time code. To start using it you […]

Azure AD B2C – New phone sign in authentication method available (preview) Read More »

Office 365 – A new attack simulator scenario is now available

As you may already know, about a year ago, Microsoft has introduced a security tool to Office 365 called Attack Simulator to help administrator and security teams to simulate attacks to their Office 365 tenant to find vulnerable accounts before a real attack occurs. Well, the Office 365 Attack Simulator has been updated to include

Office 365 – A new attack simulator scenario is now available Read More »

Azure – You can now manage how Azure Web Application Firewall with Front Door handles bot

As you may already know Azure Front Door is a global secure load balanced entry point to your published Azure resources, it works closely with Azure Web Application Firewall. As you also know, any resource published to/accessible from the Internet is a target of bot, some good (like search engine bots), some bad. Protecting your

Azure – You can now manage how Azure Web Application Firewall with Front Door handles bot Read More »

Azure – Quickly find the status of Azure Security Center recommendations

As you may know, Azure Security Center (ASC) is your own stop shop for everything related to the security of your Azure infrastructure (including when running in hybrid with your on-premises servers onboarded onto Azure). Microsoft is providing default built-in rules to help you secure your resources as per the latest recommendations. Off course you

Azure – Quickly find the status of Azure Security Center recommendations Read More »

Teams – You can now use Sensitivity Labels with Microsoft Teams

As you may already know, Office 365 services supports sensitivity labels helping your and your organization classifying and protecting your IP’s (intellectual properties) with low productivity impact on your end-users. Using sensitivity labels you can ensure your content is either encrypted, marked (or labelled) and classified accordingly to your compliance requirements, either automatically or by

Teams – You can now use Sensitivity Labels with Microsoft Teams Read More »

Exchange Online – You can now get a recommended configuration for Advanced Threat Protection

As you may already know, Office 365 Advanced Threat Protection (ATP) helps protecting Exchange Online against any security threats. That said, configuring a correct ATP protection for Exchange Online can be a little bit challenging. To help you in this process, Microsoft has released a new PowerShell module to generate an Office 365 Recommended Configuration

Exchange Online – You can now get a recommended configuration for Advanced Threat Protection Read More »

Azure – New Azure Key Vault policies to help you manage your certificates

As you know, with Azure Key Vault you can save various credentials details, including certificates used by your application or your Azure infrastructure services. With the increase of certificates use, you may have more and more certificates saved into your Key Vault, making it more complicated to manage. Well, good new, new policies have been

Azure – New Azure Key Vault policies to help you manage your certificates Read More »

Azure – You can now use a Key Vault extension with your Azure Virtual Machines

This is something which is going to simplify your life: the Key Vault extension for Azure Virtual Machine. Using this extension you will have simpler access to Azure Key Vault for your applications running on Azure Virtual Machines. The Key Vault extension supports the following operating systems: Windows Windows Server 2019 Windows Server 2016 Windows

Azure – You can now use a Key Vault extension with your Azure Virtual Machines Read More »

Azure – You can now define automation workflow on Azure Security Center (preview)

By now you should already know Azure Security Center (ASC), the unified one-stop shop security management for Azure, providing you details about your security posture and potential improvements. Well, you can now define automation workflow (in preview) to automate actions based on detection alerts or security center recommendations. Automation workflow uses Logic App to execute

Azure – You can now define automation workflow on Azure Security Center (preview) Read More »

Azure – You can now request code analysis with Microsoft Secure Code Analysis

With the Microsoft Security Code Analysis extension, you can integrate security analysis tools including Credential Scanner, BinSkim, and others into your Azure DevOps continuous integration and delivery (CI/CD) pipelines. Such code review is highly recommended as per the Secure Development Lifecycle (SDL) recommendations. This feature will increase your developers productivity while ensuring your code is

Azure – You can now request code analysis with Microsoft Secure Code Analysis Read More »