Security News
Microsoft has announced a new security research / bug bounty program aimed at testing and improving the security of Azure Sphere, its comprehensive IoT security solution. Through the Azure Sphere Security Service, the MCU can securely connect to the cloud and web, and the service makes sure that the booted software is genuine, that OS security updates are downloaded and installed securely and automatically.
Microsoft on Tuesday announced a new security research challenge that encourages white hat hackers to find and responsibly disclose vulnerabilities in the company's Azure Sphere solution. In an effort to identify potentially serious vulnerabilities in Azure Sphere, Microsoft has decided to run a three-month application-only challenge.
Fortanix, a Runtime Encryption company, announced the availability of the Fortanix Self-Defending Key Management Service running on Microsoft Azure to help customers protect private data in the public cloud. Fortanix provides a cloud-native data security solution including key management, hardware security module, tokenization, secrets management and privacy preserving analytics built on Azure confidential computing infrastructure.
Benefit Vantage, developer of the IPification seamless authentication solution, is proud to announce that we will enable global service providers to enhance user authentication and verification when using the Microsoft Azure Active Directory B2C cloud identity platform. Azure Active Directory B2C enables organizations to manage and secure customer, consumer and citizen access to web and mobile applications, enabling service providers to add and customize user identity services for registration and login purposes to their apps.
Veeam Software, the leader in backup solutions that deliver Cloud Data Management, announced the general availability of NEW Veeam Backup for Microsoft Azure, an enterprise-ready cloud backup and recovery solution. With NEW Veeam Backup for Microsoft Azure, Veeam extends its broad platform support with a comprehensive, enterprise-ready solution for added backup and recovery controls of Azure apps and data hosted on Azure virtual machines.
EnterpriseDB, the enterprise Postgres company, announced that it is extending its technical support offerings to include PostgreSQL on Amazon Web Services and Microsoft Azure. The adoption of Postgres as the preferred data store for a wide array of use cases continues to grow, and there is an increasing need for enterprise-level technical support and administration on cloud computing platforms.
How can we secure devices and make sure they stay secure? That's where Azure Sphere - Microsoft's defence-in-depth IoT platform that mixes hardware, software, and the cloud to protect your devices and your network - comes in. At the heart of Azure Sphere is a hardened Arm-based microcontroller, designed to deliver what Microsoft calls "The seven properties of highly secured devices".
UPDATE. Researchers are shedding light on a Microsoft Azure misconfiguration bug that leaked sensitive access tokens, which could have given hackers access to virtual machine instances and cloud-based storage buckets. According to CyberArk, it found the bug in September and Microsoft "Unintentionally" fixed it within two weeks as part of a regular update to its Azure platform.
Microsoft reckons 0.5 per cent of Azure Active Directory accounts as used by Office 365 are compromised every month. "About a half of a per cent of the enterprise accounts on our system will be compromised every month, which is a really high number. If you have an organisation of 10,000 users, 50 will be compromised each month," said Weinert.
As enterprises increasingly transition and scale their operations in the public cloud, at RSA Conference 2020 FireMon announced new integrations with Microsoft Azure and Amazon Web Services to help improve cloud visibility, reduce complexity and match the pace needed to protect systems from ongoing cyber threats and data breaches. "With our latest Microsoft Azure and AWS cloud integrations, customers can now deploy consistent, seamless, and adaptive security policy orchestration across any type of infrastructure."