What a Friday! I had many cases in my life but this….was amazing. This is the full history with details and the gran finale. On Friday morning, one of my customer call me (10AM) to advise that all of his clients were strange where “strange” means the disappear of icons from Taskbar, Desktop and Start […]
Tag: Security
Microsoft Defender for Office 365: manage Safe-Links policy
Questo articolo è disponibile anche in lingua italiana al seguente link: Microsoft Defender for Office 365: gestire le regole di Safe Links – WindowServer.it Within Microsoft Defender for Office 365 it is possible to manage Safe Links protection to scan all the URLs present inside Outlook, SharePoint and Teams. By default, the list is empty […]
Microsoft Defender for Office 365: add Anti-Malware extensions
Questo articolo è disponibile anche in lingua italiana al seguente link: Microsoft Defender for Office 365: aggiungere estensioni Anti-Malware – WindowServer.it Within Microsoft Defender for Office 365 it is possible to activate Anti-Malware protection to avoid attacks based on potentially dangerous attachments. By default, different formats are made available but not all and above all […]
OMIGOD: a vulnerabilities within Azure VM Management Extensions
A couple of weeks ago a new case exploded around Azure virtual machines, and on-premises as well, and specifically those Linux with Open Management Infrastructures on board. In deep there are three Elevation of Privilege (EoP) vulnerabilities (CVE-2021-38645, CVE-2021-38649, CVE-2021-38648) and one unauthenticated Remote Code Execution (RCE) vulnerability (CVE-2021-38647). Open Management Infrastructure (OMI) is an open-source Web-Based Enterprise […]
Attack Surface Reduction: why is important and how to configure in production
Questo articolo è disponibile anche in lingua italiana al seguente link: Attack Surface Reduction: cos’è e come configurarlo al meglio | WindowServer.it Attack Surface Reduction (ASR) are rules that are part of Windows Defender Exploit Guard that block certain processes and activities, with the aim of limiting risks and helping to protect your organization. Attacks […]
Microsoft Endpoint Manager: how to configure Windows Firewall policies
Questo articolo è disponibile anche in lingua italiana al seguente link: Microsoft Endpoint Manager: configurare il Windows Firewall | WindowServer.it The Cloud-Only scenario is becoming stronger in the client environment, especially for SMEs where many of the services are delegated outside the corporate infrastructure. However, there remains the age-old compliance issue that, in the absence […]
Qlocker Ransomware: QNAP NAS under attack
There seems to be no peace for IT administrators who have faced a new attack on their infrastructure these days. The QNAP storage are the target which, due to a vulnerability, CVE-2020-2509 and CVE-2020-36195, can allow malicious users to encrypt all user data with consequent ransom demand. The attack, called Qlocker, starts from a 7-zip […]
Microsoft Defender for Identity: deployment and management
Questo articolo è disponibile anche in lingua italiana al seguente link: Microsoft Defender for Identity: implementazione e gestione | WindowServer.it The protection of your IT infrastructure must pass strictly by the Domain Controllers, because they are the ones who authenticate the various objects but also because they are the first to be under attack by […]
Microsoft Defender for Endpoint: prevent Egregor Ransomware
Questo articolo è disponibile anche in lingua italiana al seguente link: Microsoft Defender for Endpoint: prevenire Egregor Ransomware | WindowServer.it The 2020 ended with the arrival of a new protagonist in the already vast panorama of ransomware, which has affected hundreds of companies, from SMB to Enterprise. Egregor, this is its name, combines techniques of […]
Microsoft Local Administrator Password Solution: deployment and management
Questo articolo è disponibile anche in lingua italiana al seguente link: Microsoft Local Administrator Password Solution: implementazione e gestione | WindowServer.it Computer security goes through every single detail and clients are perhaps the aspect on which to focus the major forces, because they are more exposed and because they are used by users who ignore […]