Enterprise Security WeeklySubscribe
Cloud Security, Endpoint/Device Security, Security Operations

All the biggest cybersecurity news out of Microsoft Ignite 2024 – ESW #385

Why a special segment on Microsoft Ignite announcements?

  1. There were a lot of announcements
  2. Microsoft is the largest security vendor, in terms of revenue
  3. Microsoft and its products are also the biggest and most vulnerable hacking target in the tech industry.
Full episode and show notes

Host

Principal Researcher at The Defenders Initiative
  1. 1. REBRANDING: Everything gets new names and icons. Again.

    Okay, brace yourselves. This isn't even the security stuff, just the mainstream Microsoft stuff.

    • Windows 365 is now a thing, and refers to Windows' own brand of VDI, from what I can tell.
    • Microsoft Office is now Microsoft 365 Apps
    • The icons for Microsoft 365 Apps now have a little Copilot icon on them. Nesting icons is so communicative and helpful
    • The icon for Microsoft 365 is now THE COPILOT icon, because that's helpful and makes sense - it will have 4 characters on it: M365, which will be the only thing distinguishing it from the Copilot copilot.
  2. 2. NEW FEATURES: Copilot Agents Everywhere

    The new AI buzzword is 'agentic'. Not to be left out, Microsoft is debuting agents everywhere throughout the M365 ecosystem.

  3. 3. NEW FEATURES: Ignite 2024 – What’s new for Microsoft 365 and Copilot admins

    More visibility for copilot admins - something they've DEFINITELY been asking for.

  4. 4. NEW FEATURES: Microsoft Launches New Security Updates in Ignite 2024
  5. 5. NEW FEATURES: Microsoft Security Copilot Updates
  6. 6. BUG BOUNTIES: Microsoft launches Zero Day Quest hacking event with $4 million in rewards

    It was Microsoft Ignite week, so we're talking about a few of their announcements today. One is the announcement of a new bug bounty with a payout pool of $4M.

    This hacking event has a scope focused on AI and Cloud products. It is open now, and runs through January 19th.

  7. 7. NEW PRODUCTS: Windows 365 Link: Cloud PC Device, Simple and Secure

    Microsoft debuts a thin client of sorts. It has local processing, but runs Windows in the cloud? I'm curious if this might be similar to Windows S, in that it would have software installation options restricted to the Microsoft Store.

    It's an enterprise product, so there are unfortunately no plans to sell it to consumers, though I'd very much like to check it out and test it.

Related

Modernizing AppSec – Melinda Marks – ASW #307

In this week's interview, Melinda Marks' joins us to discuss her latest research. Her recent report Modernizing Application Security to Scale for Cloud-Native Development delves into many aspects and trends affecting AppSec as it matures, particularly in cloud-first organizations. We also discuss the fuzzy line between "cloud-native" AppSec and ev...