Microsoft’s Best Defender is Automation
Audio/Dialogue
Visuals/Graphics
Cyber attacks are a serious problem. So who can you trust to protect your private info? Microsoft’s answer: Automation.
Microsoft 365 Defender is programmed to automatically disrupt any attacks it detects by containing threats in progress, using AI to look at signals and isolate assets that have already been affected.
That might mean suspending a compromised user’s account, resetting passwords, blocking URLs in email, removing messages and putting attachments in quarantine, automatically isolating infected devices or offboarding them completely.
And suspended devices will still be connected to Defender to allow for automated cleanup or to reconnect the device if it turns out to be a false positive.
While this sounds like a powerful tool, Microsoft is still rolling it out cautiously. One wrong triggered automation could be as disruptive as an actual attack.
And that’s the latest from TechRepublic’s News of the Week.