Security

Azure – You can now automatically on-board virtual machine on Azure Security Center

As you know, after provisioning a virtual machine you had to manually connect to your Azure Log Analytics workspace to deploy the Monitoring Agent on the VM and then get reporting to Azure Security Center. Well, now you can totally forget to do such thing as you will be able to get any new virtual […]

Azure – You can now automatically on-board virtual machine on Azure Security Center Read More »

Azure – Azure Bastion is now in public preview

After being in private preview for few months, Azure Bastion, a new way to remotely access virtual machine on Azure, is now in public preview. Azure Bastion is a PaaS (Platform as a Service) provisioned within your Azure virtual network allowing you to remotely and securely access your virtual machine using Remote Desktop (RDP) or

Azure – Azure Bastion is now in public preview Read More »

Azure – Azure MFA Server is going to be retired

As you may know Azure Multi Factor Authentication is (or was as per the below) also available for on-premises deployment (known as Azure MFA Server) to protect your on-premises systems (like remote desktop, VPN, web server or Exchange). Well, on July 1st 2019, Azure MFA will be no longer available for new deployment; existing deployment

Azure – Azure MFA Server is going to be retired Read More »

Security – The Microsoft Attack Surface Analyzer, version 2.0, is now available

For those working in securing Windows environment, from both configuration and development side, you should already know the Attack Surface Analyzer (https://www.microsoft.com/en-us/download/details.aspx?id=24487). Well, good news, after quite some waiting (about 7 years since this has been first released), a new version of the Attack Surface Analyzer has been released and is available now on GitHub

Security – The Microsoft Attack Surface Analyzer, version 2.0, is now available Read More »

Microsoft Defender – Microsoft Defender Advanced Threat Protection is now available in public preview for MacOS

After a limited preview earlier in March, Microsoft Defender Advanced Threat Protection (ATP) is now available in public preview for MacOS devices. To get this preview, you need to have first turn the preview feature in your Security Center portal (see https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/preview) All the documentation is available here https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/microsoft-defender-atp-mac You can on-board Mac devices from

Microsoft Defender – Microsoft Defender Advanced Threat Protection is now available in public preview for MacOS Read More »

Azure AD – New conditional access policies in preview

After providing in preview an Azure Active Directory (Azure AD) Conditional Policy to request MFA for administrator accounts (which by the way is now GA), Microsoft is providing 3 new pre-configured conditional access policies in preview: Baseline policy: End user protection, to help protecting your end-users. It will require Azure Multi-Factor Authentication (MFA) during risky

Azure AD – New conditional access policies in preview Read More »

Azure AD Connect – Potential vulnerability in version 1.3.20.0

A vulnerability in Azure Active Directory Connect (Azure AD Connect), the directory synchronization tool for Office 365/Azure AD, version 1.3.20.0 (the latest one released last late April) has been found. This vulnerability may lead to an elevation of privileges, under specific conditions, allowing an attacker to execute 2 PowerShell cmdlets in the context of a

Azure AD Connect – Potential vulnerability in version 1.3.20.0 Read More »

Office 365 – New security management tool available in preview

A new security tool is now available in preview in Office 365 called Security Policy Advisor. The Security Policy Advisor is providing recommendations to help improve and increase security of your Office 365 ProPlus deployment to protect you against threats and provide insights on impact of deploying policies. The Security Policy Advisor can be used

Office 365 – New security management tool available in preview Read More »

Azure AD – You can now secure SSPR and MFA registration using conditional access

You may already know this is a best practice to get your users registered for Azure Multi Factor Authentication (MFA) and Self Service Password Reset (SSPR). That said, the registration requires your end-user to provide sensitive information (phone number, external email address…) to help the system to properly identify them during the registration process –

Azure AD – You can now secure SSPR and MFA registration using conditional access Read More »

Office 365 – New home for Secure Score

As you may be aware, Secure Score has been there for a while already, helping you understand your security posture on Office 365 and helping you improving it. Now, after the release of the new Microsoft Office Security Center (https://security.microsoft.com), Secure Score has moved to a new home hosted in this portal (https://security.microsoft.com/securescore?viewid=overview). Don’t get

Office 365 – New home for Secure Score Read More »