Microsoft unveils new phishing prevention capabilities

VentureBeat reports that new phishing prevention capabilities have been introduced by Microsoft in an effort to better combat phishing threats against Office 365, Azure, and remote desktop environments. Microsoft has unveiled certificate-based authentication that would allow Azure AD authentication among organizations with smart card and public-key infrastructure even if they lack a federated server. Meanwhile, enterprises could leverage the new conditional access feature for implementing YuBiKeys for phishing-resistant multi-factor authentication, FIDO-based passwordless or certificate-based authentication, and other user authentication policies. Microsoft has also added FIDO authenticator support for Azure Virtual Desktops in a bid to prevent phishing attacks and credential theft. "Providing new identity solutions to protect our customers is paramount in the fight to stop phishing. We're excited to launch these new features that support key steps customers can take in their zero-trust journey, and Yubico has been with us fighting against these phishing attacks every step of the way," said Microsoft Identity and Network Access Vice President of Product Management Sue Bohn.