Microsoft Defender XDR Expanded to Malicious OAuth Apps With the Power of AI

In an update to its security operations suite, Microsoft has announced the expansion of its Defender Extended Detection and Response (XDR) capabilities to include advanced AI-powered detection and mitigation of threats posed by malicious OAuth applications.

This enhancement is part of a broader initiative to provide comprehensive protection across a range of environments and technologies, leveraging the power of artificial intelligence to safeguard against increasingly sophisticated cyber threats.

The latest update to Microsoft Defender XDR introduces a cutting-edge feature designed to identify and neutralize attacks orchestrated through malicious OAuth apps.

Integrate ANY.RUN in Your Company for Effective Malware Analysis

Are you from SOC, Threat Research, or DFIR departments? If so, you can join an online community of 400,000 independent security researchers:

• Real-time Detection
• Interactive Malware Analysis
• Easy to Learn by New Security Team members
• Get detailed reports with maximum data
• Set Up Virtual Machine in Linux & all Windows OS Versions
• Interact with Malware Safely

If you want to test all these features now with completely free access to the sandbox:

Try ANY.RUN for FREE

By employing advanced AI algorithms, Defender XDR can now effectively shut down compromised applications, thereby preventing attackers from further exploiting these apps to gain unauthorized access to sensitive data and systems.

The update bolsters defenses against malicious OAuth apps and brings several other significant enhancements to the Defender XDR platform.

Notably, it extends protection to Operational Technology (OT) and Industrial Control Systems (ICS) environments by natively integrating Microsoft Defender for IoT.

This move underscores Microsoft’s commitment to securing traditional IT infrastructure and the critical operational technologies that power industries and essential services.

On-Demand Webinar to Secure the Top 3 SME Attack Vectors: Watch for Free.

Furthermore, integrating Insider Risk Management insights from Microsoft Purview into the XDR experience offers organizations a more nuanced understanding of risky user activities.

This feature provides valuable context that can help security teams identify and mitigate insider threats more effectively.

The announcement also highlights the availability of a unified security operations platform that combines the capabilities of Defender XDR and Microsoft Sentinel.

This integrated platform offers additional shared capabilities, enhancing the ability of security teams to detect, investigate, and respond to threats across their digital estates.

Another noteworthy addition is the introduction of new in-browser protection features in Microsoft Defender for Cloud Apps.

This enhancement enables organizations to manage secure session access and data interaction policies for Software as a Service (SaaS) applications directly within Microsoft Edge.

Doing so adds an extra layer of security for cloud-based applications, ensuring that data remains protected even when accessed from the web.

Overall, the latest updates to Microsoft Defender XDR represent a significant step forward in the fight against cyber threats.

By leveraging AI to enhance its detection and response capabilities and by extending protection to cover a wider range of environments and technologies, Microsoft is providing organizations with the tools they need to stay ahead of attackers in an ever-evolving cybersecurity landscape.

Is Your Network Under Attack? - Read CISO’s Guide to Avoiding the Next Breach - Download Free Guide