Monthly news – November 2024

Guidance for using Microsoft security features to address CUPS remote code execution vulnerabilities.

In this blog post We’ll show you how you can easily discover if your organization is vulnerable to a serious unauthenticated RCE flaw in your CUPS printing system and view remediation guidance.

ninja show: In this two-episode look at Microsoft Security Exposure Management, you’ll learn how to quantify risk, generate reports for key stakeholders, integrate your security stack, and optimize attack surface management. Watch the recording. Part 1 and Part 2.

microsoft New permission levels have been added to unified RBAC roles. The Ask Defender expert feature is available to Microsoft Threat Experts customers. Find out more in our article.

A variety of new data has been released In advanced hunting Via the CloudAppEvents table

– abnormal data

– Conditional Access App Control/Inline Data

– OAuthAppId

we published New short training video (6 minutes) App governance.

Threat actors are using app IDs rather than people as an attack vector, which is unfortunately not well understood. Customers who own Defender for Cloud Apps can enable app governance and turn on powerful features with just a few simple clicks..

Watch this short 4-minute training video for ““How to investigate email messages in Microsoft Defender for Office 365”.

Ninja Show Episodes:

• Defense in Depth with Dual-Use Scenarios: We explore the protection mechanisms built into Defender for Office 365 with Manfred Fischer, Senior Product Manager, and Dominik Hoefling, Cloud Solutions Architect. First-party email filtering services can still benefit from the powerful features and controls of Defender for Office 365.
• Bulk sender information in Microsoft Defender for Office 365: In this episode, Senior Product Manager Puneeth Kuthati explains the importance of high-volume sender insights within Defender for Office 365. Learn how these insights can help you distinguish trusted bulk senders from potential threats, troubleshoot fine-tuning bulk email filters, and take the right action. Maintain a balance so that important emails reach your inbox without stress. By analyzing sender behavior and trends, organizations can strengthen email security, reduce bulk unsolicited traffic, and minimize false positives.