At the Microsoft Ignite 2024 event, Microsoft announced several security updates, including the availability of the Security Exposure Management tool, a new $4 million bounty, new security updates, and skills for Copilot.
“At Microsoft, we remain steadfast in our commitment to security, which continues to be our top priority,” said Microsoft in the release document. “Through our Secure Future Initiative (SFI), we’ve dedicated the equivalent of 34,000 full-time engineers to the effort, making it the largest cybersecurity engineering project in history,” added Microsoft
Security Exposure Management Now Available
Microsoft announced the availability of its new Security Exposure Management tool. The tool integrates Microsoft Defender products to provide a unified view of the ‘enterprise security posture’ and helps organisations assess security threats. Microsoft has released supporting technical documentation that dives deep into the tool’s features and capabilities.
The tool also helps users mark critical assets to prioritise security and provides various controls to manage them. It also offers insights and contexts regarding data security, including events, recommendations, metrics, and initiatives. Microsoft is also said to show the user ‘attack paths’, which show how an attacker may potentially breach your data.
As mentioned, Microsoft’s Security Exposure Management tool mainly provides a unified platform, consolidating data from various sources in your organisation.
Microsoft also mentioned that one of the core motivations behind the platform is the user’s lack of understanding of the relationship between data ‘pathways’ and ‘entities’ across their systems or devices.
Microsoft’s Security Fellow and Deputy Chief Information Security Office (CISO) John Lambert said, “Defenders think in lists, cyberattackers think in graphs. As long as this is true, attackers win,” referring to how bad actors frequently exploit the relationship between data entities and devices.
Microsoft also mentioned that customers use Exposure Management in over 70,000 cloud tenants. The Security Exposure Management tool is available in the Microsoft Defender portal.
A New $4M Bug Bounty
Furthermore, Microsoft also announced a $4 million AI and cloud security bug bounty called “Zero Day Quest.” The hacker bounty is directed at researchers who want to investigate crucial security vulnerabilities, specifically in the cloud and AI.
“Zero Day Quest will provide new opportunities for the security community to work hand in hand with Microsoft engineers and security researchers – bringing together the best minds in security to share, learn, and build community as we work to keep everyone safe,” said Microsoft in the announcement.
Updates for Security Copilot
Microsoft also announced new security skills and updates for Copilot AI. Using Copilot in Purview, admins will now be able to perform accurate risk analyses throughout their data estate. Furthermore, Microsoft also announced the availability of Security Copilot inside Microsoft Entra, which is now available in preview.
Source: Microsoft Ignite Event 2024
Microsoft also announced more capabilities for Copilot in Intune, which are available in the preview. The feature expansions include capabilities to investigate app elevation details and identify signs of compromised apps before approving ‘Endpoint Privilege Management’ requests.
Copilot is also set to assist with creating KQL queries for single—and multi-device analysis. Within Intune, Copilot can also ease update management with Windows Autopatch, which allows it to support all of the essential update tasks.
Copilot also offers enhancements for SOC teams (Security Operations Centers), including a new identity summary for faster user threat identification. Moreover, over 15 new third-party plugins, including CrowSec, Netskope, CyberArk, etc., are available within Copilot.
Interestingly, Microsoft also mentioned that security teams observed a 30% decrease in the time to resolve issues using Security Copilot and a 17% decrease in breaches.
The post Microsoft Launches New Security Updates in Ignite 2024 appeared first on Analytics India Magazine.