Security News > 2021 > June > Microsoft Defender for Endpoint now detects jailbroken iOS devices

Microsoft has announced new and improved capabilities for enterprise security teams that use Microsoft Defender for Endpoint on Android and iOS and Microsoft threat and vulnerability management APIs.

Microsoft Defender for Endpoint - a cloud-powered enterprise endpoint security platform designed to help enterprise networks prevent, detect, investigate, and respond to advanced threats - now has a new mobile app that makes it easier for users to see whether their Microsoft Tunnel VPN connection is operational, web protection is on, and the apps on their mobile devices are potentially dangerous.

The most important new additions are jailbreak detection for iOS and mobile application management support for non-Intune enrolled devices on both Android and iOS. From now on, Microsoft Defender for Endpoint on iOS will detect both unmanaged and managed devices that are jailbroken.

"Jailbreaking an iOS device elevates root access that is granted to the user of the device. Once this happens, users can easily sideload potentially malicious applications and the iPhone won't get critical, automatic iOS updates that may fix security vulnerabilities. These kinds of devices introduce additional risk and a higher probability of a breach to your organization," noted Shravan Thota, Senior Program Manager at Microsoft.

If the solution detects a jaibroken device, the security team will see a "High-risk" alert in Microsoft 365 Defender and, if the Conditional Access setup is based on device risk score, the device will be blocked from accessing corporate assets.

Finally, Microsoft Defender for Endpoint now supports mobile application management on Android and iOS for devices what have not been enrolled via Intune.

News URL

http://feedproxy.google.com/~r/HelpNetSecurity/~3/MTUQblsIXaE/