Microsoft Defender will isolate undiscovered endpoints to block attacks

https://www.bleepingcomputer.com/news/microsoft/microsoft-defender-will-isolate-undiscovered-endpoints-to-block-attacks/

Microsoft is testing a new Defender for Endpoint capability that will block traffic to and from undiscovered endpoints to thwart attackers' lateral network movement attempts.

13 points · 3 comments · view on lemmy.world

3 Comments

BombOmOm@lemmy.world · 2 pts · 1y (2 replies)

Would someone smarter than me explain the article a bit? I'm getting lost on what things like a 'contained IP address' is.

SquiffSquiff@lemmy.world · 3 pts · 1y (1 reply)

If I understand correctly:

Deciphering the market speak: a computer with defender installed on a corporate network will ignore other computers on the same network unless they also have defender installed. Ignored computers are 'contained' by IP address

BombOmOm@lemmy.world · 2 pts · 1y

Thank you. <3