Secure Microsoft 365 Modern Workplace
Microsoft 365 and Azure cloud services offers unbeatable flexibility and functionality for modern organizations. However, with IT teams leading the charge on Microsoft public cloud services and Office 365 migration, security teams are often left playing catch-up. Many teams lack the expertise to configure, implement and manage security products included in their Microsoft Enterprise Agreements. At the same time, they struggle with the impact of a network perimeter that has dissolved in the cloud, leading to a loss of visibility and control over digital operations.
Are You Using Microsoft 365 Securely?
Microsoft 365 suite has rapidly become the default productivity suite for thousands of organizations. When configured and maintained properly, the security functionalities in the Microsoft 365 productivity suite can enable users to harness the business and operational value of a modern workplace. As a Microsoft Security Partner, Kudelski Security provides organizations a comprehensive solution to simplify their overall Microsoft security strategy and protect identity, access and data. We enable clients to embrace secure new Microsoft technologies wherever they are in their migration journey.
Microsoft Security and Compliance
We help organizations assess security posture, and design and implement a Microsoft 365 security strategy that’s aligned with their own security and business objectives.
We leverage native Microsoft 365 security capabilities such as Azure Active Directory to protect your organization from unauthorized access and identity threats while maintaining an integrated and simple user experience.
We safeguard client data automatically with Azure Information Protection while enabling user productivity and secure collaboration across devices and locations.
Detect Advanced Threats
Detect and respond to the most advanced threats in minutes—not hours or days—with our native cloud security monitoring service for Microsoft 365 and Azure environments.
Consolidate your security spend onto the same technology ecosystem that powers your business.
Transform Workplace Experience
Safely harness the operational benefits of Microsoft 365 and Azure with backing from the world’s leading security experts.
The Kudelski Security Advantage
Trusted Microsoft Partner
Kudelski Security is a Microsoft Security Partner and trusted independent leader in cybersecurity.
End-to-End Secure Workplace
From gap analysis to managed security services, our Microsoft 365 and Azure expertise help you design and maintain a robust security posture as well as meet regulatory requirements.
We continually refine our systems, policies, and procedures to ensure we detect and contain cyber threats no matter where they arise.
Our cutting-edge Cyber Fusion Center provides 24/7/365 protection against the latest, most advanced cyber threats.
CurveBall: Microsoft Windows CryptoAPI Spoofing Vulnerability Webcast
Kudelski Security’s Francisco Donoso, Director – Global Security Strategy, provides a brief webcast overview of CurveBall, the Microsoft Windows cryptographic API vulnerability. Today, we’ll be talking about CurveBall, a Microsoft Windows cryptographic API vulnerability. We’ll give you a brief overview of Curveball as the vulnerability is called, talk a little bit about the potential impact and what you can do to remediate and detect.
You Suck at Office 365 Logging
One of the misconceptions about cloud services is that you have to surrender all control when you sign-up. While it is true that you may no longer have racks of servers with blinking lights humming away in your data center, it doesn’t mean that you no longer have any visibility into how your users use and interact with the service.
Microsoft Advisory: Microsoft Server Message Block 3 (SMBv3) Vulnerability
On March 10th, a critical Remote Code Execution (RCE) vulnerability in the Microsoft Server Message Block (SMBv3) protocol was inadvertently disclosed. The vulnerability, known as CVE-2020-0796, is caused by how newer Windows operating systems handle certain requests, specifically compressed SMBv3 packets.
CVE-2020-0601: The ChainofFools/CurveBall Attack Explained with PoC
On Tuesday the 14th of January 2020, in the frame of their first Patch Tuesday of 2020, Microsoft addressed a critical flaw discovered by the NSA in the Windows 10, Windows Server 2016 and 2019 versions of crypt32.dll, the library implementing Windows’ CryptoAPI. It didn’t take too long until it got branded “ChainOfFools” by Kenn White in a blog post. (And was then later rebranded “CurveBall” by Tal Be’ery.)
Get In Touch
Talk to one of our experts to learn how our award-winning cyber-security services can act as a force multiplier for your your organization.