Microsoft 365 users can finally breathe, as Copilot for Security promises to deal with all cyber threats

It’s well known that the Microsoft 365 productivity platform is one of the most popular targets for bad actors: in 2022, alone, over 80% were hacked, and the attacks don’t seem to stop. For instance, back in January, phishing attacks on the platform were peaking, and users were advised to pay close attention to any kind of email.

It’s safe to say that it’s quite stressful to be a Microsoft 365 user: with threats looming everywhere, nothing on the platform seems to be trustworthy, and even clicking on a seemingly innocent email can wreak havoc in companies.

However, Microsoft says that is about to change to Copilot for Security will deal with all the cyber threats coming to the 365 productivity platform.

Copilot for Security was recently released to Microsoft 365 users, and the Redmond-based tech giant is already updating it to face the most common cyber threats, such as IP theft, data leakage, and security violations. but also potential malicious risks.

According to the latest entries in the Microsoft 365 Roadmap, Copilot for Security will be updated to support Purview capabilities in April 2024, and it will also allow users to gain a comprehensive summary of Insider Risk Management alerts, starting May 2024.

The Purview capabilities coming to Copilot for Security will ensure that each cyber attack on Microsoft 365 accounts will be heavily documented, and investigated, while also coming up with comprehensive plans of action for further attacks.

With Microsoft Purview capabilities in Copilot for Security, your security teams gain unprecedented visibility across the security data. Microsoft Purview brings user risk and data risk insights to help the SOC with comprehensive and enriched signals to understand the full attack story and impact of a security incident. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.

Microsoft

The insights summary of Insider Risk Management alerts will provide security experts with useful information on the nature of the cyber attacks and will allow them to create certain policies to manage these attacks.

Copilot for Security is embedded in Insider Risk Management to summarize alerts to help accelerate data security investigations. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.

Microsoft

Threat actors are indeed starting to use AI to develop more complex cyber attacks, and the Microsoft 365 platform won’t be out of the woods just yet. But it doesn’t have to be, as long as it has the means to intercept these attacks before they cause any damage.

And Microsoft might just do that.