Toward greater transparency: Adopting the CWE standard for Microsoft CVEs | MSRC Blog At the Microsoft Security Response Center (MSRC), our mission is to protect our customers, communities, and Microsoft from current and emerging threats to security and privacy. One way we achieve this is by determining the root cause Read more…
Congratulations to the Top MSRC 2024 Q1 Security Researchers! | MSRC Blog Congratulations to all the researchers recognized in this quarter’s Microsoft Researcher Recognition Program leaderboard! Thank you to everyone for your hard work and continued partnership to secure customers. The top three researchers of the 2024 Q1 Security Researcher Read more…
Embracing innovation: Derrick’s transition from banking to Microsoft’s Threat Intelligence team | MSRC Blog Meet Derrick, a Senior Program Manager on the Operational Threat Intelligence team at Microsoft. Derrick’s role involves understanding and roadmapping the complete set of tools that Threat Intel analysts use to collect, analyze, process, and disseminate Read more…
Faye’s Journey: From Security PM to Diversity Advocate at Microsoft | MSRC Blog Faye, a veteran at Microsoft for 22 years, has had a career as varied as it is long. Her journey began in 2002 as the first desktop security Project Manager (PM) in Microsoft IT. From there, she Read more…
From Indiana Jones to Cybersecurity: The Inspiring Journey of Devin | MSRC Blog As a young boy, Devin found himself captivated by the adventures of Indiana Jones, the whip-wielding archaeologist from the VHS movies his grandfather showed him. The thrill of unearthing history and the allure of the unknown ignited Read more…
An Obsession With Impact: The Inspiring Journey of a Dreamer That Led to a Career at Microsoft | MSRC Blog Bruce’s story unfolds in Cincinnati, Ohio. As a young boy, he had an ambitious dream of one day becoming the President of the United States. This aspiration remained his guiding Read more…
Congratulations to the Top MSRC 2023 Q4 Security Researchers! | MSRC Blog Congratulations to all the researchers recognized in this quarter’s Microsoft Researcher Recognition Program leaderboard! Thank you to everyone for your hard work and continued partnership to secure customers. The top three researchers of the 2023 Q4 Security Researcher Read more…
Azure Serial Console Attack and Defense – Part 2 | MSRC Blog This is the second installment of the Azure Serial Console blog, which provides insights to improve defenders’ preparedness when investigating Azure Serial Console activity on Azure Linux virtual machines. While the first blog post discussed various tracing activities, Read more…
Microsoft Mitigates Three Vulnerabilities in Azure HDInsight | MSRC Blog Microsoft recently remediated one Denial of Service and two Escalation of Privilege vulnerabilities affecting third party components of Azure HDInsight. Access to the target cluster as an authenticated user was a prerequisite for exploitation in all three cases. A successful Read more…
Celebrating ten years of the Microsoft Bug Bounty program and more than $60M awarded | MSRC Blog This year marks the tenth anniversary of the Microsoft Bug Bounty Program, an essential part of our proactive strategy to protect customers from security threats. Since its inception in 2013, Microsoft has awarded Read more…