Security preview of Microsoft 365 Enterprise

I did an Microsoft 365 Security overview session, combined with demos and quite extensive discussion, with group of IT Pros that work in Public Safety and Judicial Sector. (They are not keen on taking pictures of them, even in compliance with GDPR:))

We did a extensive overview of Microsoft 365 Security features, in four segments - Compliance, Secure Access and Identity, AI and Automation, and Security Operations Center (SOC). Spiced things up with some demos on Compliance Manager, Data Retention and Protection Policies,  Azure AD, Conditional Access, MFA, and Security Center and Sentinel.

I personally liked the Q&A and discussion session we had during the day, it gave u the opportunity to go beyond the slides and demos, and discuss some real life issues they are facing, and how cloud tech can support their efforts.

The presentation can be downloaded on the following link

Bulletin: CPU vulnerability

An industry-wide, hardware-based security vulnerability was disclosed yesterday.The problem affect many processor types, covering Xeon, AMD and ARM variants.

So far, there are three known variants of the issue:

• Variant 1: bounds check bypass (CVE-2017-5753)
• Variant 2: branch target injection (CVE-2017-5715)
• Variant 3: rogue data cache load (CVE-2017-5754)

Besides physical/private cloud systems, this issue affects public cloud providers, and as such they have taken appropriate steps for risk mitigation.Refer to the enclosed links for additional information.


Project Zero: https://googleprojectzero.blogspot.mk/2018/01/reading-privileged-memory-with-side.html

Microsoft Security Tech Center: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002

Microsoft Azure: https://azure.microsoft.com/en-us/blog/securing-azure-customers-from-cpu-vulnerability/