Microsoft Defender for Endpoint
Coverage of Microsoft Defender for Endpoint in the Nexus archive.
- Microsoft Defender for Endpoint leaves some Linux boxes defenseless after update
Microsoft Defender for Endpoint on Linux has two critical issues: a recent update may disable the security service after reboot, and another prevents updates on FIPS-enabled Red Hat Enterprise Linux 8 and 9. Microsoft provided fixes in versions 101.26042.0011 and 101.26052.0011, respectively.
- Cybersecurity firm says it found 'the first documented case' of AI agentic ransomware
Sysdig researchers documented the first agentic AI ransomware attack, named 'Jade Puffer,' where an AI model orchestrated a complex ransomware campaign. The attack lowered the barrier to entry for ransomware by automating tasks like credential harvesting and generating ransom notes, with minimal cost to attackers.
- Microsoft Defender can now automatically isolate hacked endpoints
Microsoft is testing a new Defender for Endpoint capability that automatically isolates compromised endpoints to prevent attackers from moving laterally across networks. This feature aims to enhance network security by containing threats in real-time.