Microsoft has made substantial strides in its Secure Future Initiative (SFI), a comprehensive program aimed at fortifying the security of its products and services. The latest updates reveal that the company has removed 730,000 unused apps and 5.75 million inactive tenants from its cloud systems, significantly reducing the potential attack surface and minimizing the risk of leaks and vulnerabilities.
Secure Future Initiative: A comprehensive security overhaul
The Secure Future Initiative, launched in November 2023, is a multifaceted effort that focuses on six key security pillars: protecting identities and secrets, isolating production systems, improving network security, protecting development environments, threat detection, and enhancing incident response. This initiative is a direct response to the US Cyber Safety Review Board’s critical assessment of Microsoft’s security practices and the need for significant reform.
Key highlights of the SFI include:
- Removal of unused apps and inactive tenants: The elimination of 730,000 unused apps and 5.75 million inactive tenants from Microsoft’s cloud systems has significantly reduced the potential attack surface.
- Deployment of secure devices: Microsoft has deployed 15,000 secure devices for its production teams, ensuring that critical operations are conducted with enhanced security.
- Video-based identity verification: The company has implemented video-based identity verification for nearly all staff (95%), further securing access to its systems.
- Enhanced security protocols: Updates to Microsoft Entra ID and Microsoft Account have been completed to automatically rotate token signing keys, preventing mishandling and enhancing security.
Video-based user verification: A new layer of protection
In addition to the SFI, Microsoft has rolled out video-based user verification for over 95% of its customers. This measure is designed to prevent phishing attacks and credential theft by adding an extra layer of verification. The company has also enabled Microsoft Purview features to prevent attackers from extracting sensitive information such as passwords or tokens that can be reused in future attacks.
Commitment to security
Microsoft’s commitment to security is underscored by the scale of resources mobilized for the SFI, with the equivalent of 34,000 full-time engineers dedicated to this initiative. The company has also integrated security performance into employee evaluations, ensuring that every employee is accountable for prioritizing security.
Future plans
The Secure Future Initiative is an ongoing effort, with Microsoft continuously adapting to new cyber threats and refining its security practices. The company remains committed to transparency and industry collaboration, as evidenced by its support for the United States Cybersecurity and Infrastructure Security Agency’s (CISA) Secure by Design pledge.
Microsoft’s Secure Future Initiative and the rollout of video-based user verification mark significant strides in enhancing the security of its products and services. These efforts demonstrate the company’s dedication to prioritizing security and protecting its customers from evolving threats and vulnerabilities.
About The Author
Discover more from Microsoft News Now
Subscribe to get the latest posts sent to your email.