Downloads are so common in attacks... Want to see more info on them and do some hunting? Well, read July's hunting tip of the month: techcommunity.microsoft.com/t5/Threat-Inte… #WDATP #advancedhunting #DFIR

I know the focus is on Linux, but after clarifications from multiple sources, it would appear that this also protects ReactOS (an OIN member) from Windows patent issues. This is huge, and something I had been dreaming for more than a decade. Microsoft’s really changed.

We're beginning a series of posts about recent advancements we've made in the Windows Kernel. Here's the first one! insider.windows.com/en-us/articles…

#Brexit by 🤠ro Besser gehts nicht. 🇬🇧❣️

Windows Sandbox is a new lightweight desktop environment tailored for safely running applications in isolation. techcommunity.microsoft.com/t5/Windows-Ker… #Windows10

And please fill my old position.

Friends of mine searching for a new colleague. Being an IT Infrastructure Engineer in an awesome team, sounds appealing? Then visit loga3-unternehmertum.odav.de/bewerber-web/?…

msrc-blog.microsoft.com/2020/01/14/jan… To all Windows users everywhere - patch your systems now! (#MDATP and #WDAV have coverage for attempted exploitation of CVE-2020-0601).

Thank you Agustin Gianni for your awesome workshop!

Illustration of an end-to-end attack chain across multiple domains using Microsoft security products was just posted! Tali Ash Stefan Sellmer microsoft.com/security/blog/…

Security researchers always worry about the potential... TAG shows the reality.

We're sharing additional details related to the attacks by the threat actor that Microsoft tracks as ZINC targeting security researchers. Read our analysis, and get IoCs, detection and hunting information, and recommended actions and preventive measures: msft.it/6013pQAmT

Disrupted a cross-cloud BEC campaign impacting hundreds of victims. Here’s a behind-the-scenes look at their custom tools & techniques microsoft.com/security/blog/… There’s tons more happening to disrupt cyber crime – credit for this particular write-up goes to my coauthor Stefan Sellmer

AiTM phish kits are on the rise as session token replay is the attacker’s response to MFA. Dor and team wrote an excellent blog with a lot of insights into the threat landscape, creative detections and defense recommendations.

Great summary of AiTM mitigations.

Check out this post on the Microsoft Tech Community : XDR attack disruption in action – Defending against a recent BEC attack - Microsoft Community Hub techcommunity.microsoft.com/t5/microsoft-3…

DEV-1101 enables high-volume AiTM campaigns with open-source phishing kit microsoft.com/en-us/security…