Monthly news - October 2022

Microsoft 365 Defender
Monthly news
October 2022

This is our monthly "What's new" blog post, summarizing product updates and various assets we have across our Defender products.

Legend:
	Product videos	Webcast (recordings)	Docs on Microsoft	Blogs on Microsoft
	GitHub	External	Product improvements	Previews / Announcements

Microsoft 365 Defender

	What’s new in XDR at Microsoft Ignite. Read all the news announced at Ignite.
	Identity Protection alerts are coming to Microsoft 365 Defender. Azure Active Directory (Azure AD) Identity Protection alerts are now part of Microsoft 365 Defender.
	Protect your environment against hybrid identity attacks. This blog uses “MagicWeb” as a recent example of an attack abusing hybrid identity environments, and provides important information on how to protect against these types of attacks.

Microsoft Defender for Cloud Apps

	Introducing the Microsoft Defender for Cloud Apps data protection series. This will be a series of blogs where the goal is to help shed light on when to use Defender for Cloud Apps and Purview to protect your data. Additionally, we want to provide guidance on best practices of implementing policies for your use cases.
	Native Integration of Microsoft Defender for Cloud Apps in Microsoft 365 Defender is now in public preview! The entire Defender for Cloud Apps experience in Microsoft 365 Defender is now available for public preview. Unified SecOps and security admins experience benefits: 1. Save time and costs 2. Enable customers to have a holistic investigation experience 3. Benefit from additional data and signals in advanced hunting 4. Integrated protection across all security workloads Watch this video to learn more about it.
	Hunt for compromised Azure subscriptions using Microsoft Defender for Cloud Apps. In this blog, we will describe how attackers can compromise Azure subscriptions and use them for malicious activities. In addition, we will share how Microsoft Defender for Cloud Apps data can help hunt for these activities and how to mitigate the risk of compromised subscriptions.

Microsoft Defender for Endpoint

	Microsoft Defender for Endpoint announcements at Microsoft Ignite 2022. Read a summary of all the Defender for Endpoint announcements at Ignite.
	Malware Protection support for Android is now generally available for GCC.
	Detecting and remediating command and control attacks at the network layer. We are excited to announce the public preview of Network Protection command and control (C2) detection and remediation capabilities in Microsoft Defender for Endpoint.

Microsoft Defender for Office 365

Build custom email security reporting with Microsoft Defender for Office 365 and PowerBI. In this blog, we will showcase an example on how you can leverage Power BI and the Microsoft 365 Defender Advanced Hunting APIs to build a custom dashboard and share a template that you can customize and extend.

Microsoft Defender Vulnerability Management

Support for Common Vulnerabilities and Exposures (CVEs) without a security update in public preview. Some CVEs may lack the required security updates for all or a subset of affected software, which prevents successful remediation efforts. We are excited to announce that support and reporting on the availability of security updates for CVEs is now in public preview in Microsoft Defender Vulnerability Management.

Published on: November 01, 2022

Learn more

Microsoft 365 Defender Blog articles

Blog image

Microsoft 365 Defender Blog articles

Learn more

Monthly news - October 2022

Related posts