In the interest of helping customers concerned about the Solorigate attacks we are publishing a new workbook in the Azure AD admin portal to assist investigations into the Identity Indicators of Compromise related to the attacks. The information in this workbook is available in Azure AD audit and sign in logs, but the workbook helps…
Microsoft recently disclosed a set of complex techniques used by an advanced actor to execute attacks against several key customers. While we detected anomalies by analyzing requests from customer environments to the Microsoft 365 cloud, the attacks generalize to any Identity Provider or Service provider. For this reason, we want to detail what we know…
Many customers connect their private corporate networks to Microsoft 365 to benefit their users, devices, and applications. However, there are many well-documented ways these private networks can be compromised. As we have seen in recent events related to the SolarWinds compromise, on-premises compromise can propagate to the cloud. Because Microsoft 365 acts as the “nervous…
Today, I’m pleased to announce that we are taking the next step in our commitment to the resilience and availability of Azure AD. On April 1, 2021, we will update our public service level agreement (SLA) to promise 99.99% uptime for Azure AD user authentication, an improvement over our previous 99.9% SLA. This change is…
Howdy folks, We’ve heard from you over the years that while you’re always interested in capabilities that make your own IT experiences more seamless, you’re even more passionate about creating highly productive and secure experiences for your workforce. This is more relevant than ever, with a recent Microsoft study revealing that identity decision makers like you say that investing in end-user experiences is your top investment priority for the next year. Your passion for your workforce is our passion, and so…
Hello Everyone,One of the amazing journeys I have been lucky to be a part of is developing our self-tuning algorithms for detecting attacks on accounts in real-time. Back in 2012, we got tired of the treadmill of manually adapting to attackers and committed to adaptive learning systems. Today, I want to share some cool new…
As we wrap up the end of the year, I wanted to share my gratitude for all the partners that have contributed in helping our customers rapidly enable a secure remote workforce. From securing applications to rolling out passwordless solutions or ensuring seamless collaboration across organizations, our partners have been critical in helping our customers adapt to a new way…
Howdy folks, Today we are announcing the public preview of password management and autofill capability in the Microsoft Authenticator app. For any sites or apps you visit on your mobile device, Authenticator will help you autofill strong passwords without having to remember them. These passwords can be synced across mobile and desktop, so you can…
As a new normal has been defined by a worldwide pandemic and economic changes this year, businesses have sought new ways to optimize the delivery of their goods and services and better IT cost efficiency in an increasingly remote work environment. The technology that lays the foundation for remote work, hyperconverged infrastructure, has long been…
The internet runs on the Border Gateway Protocol (BGP). A network or autonomous system (AS) is bound to trust, accept, and propagate the routes advertised by its peers without questioning its provenance. That is the strength of BGP and allows the internet to update quickly and heal failures. But it is also its weakness—the path…