Microsoft is testing a new Defender for Endpoint feature that will prevent communication from and to unknown endpoints in order to prevent lateral network movement attempts by attackers.
Earlier this week, the business said that this is accomplished by limiting the IP addresses of devices that have not yet been identified or added to Defender for Endpoint.
According to Redmond, the new capability would limit incoming and outgoing communication with devices utilizing confined IP addresses, preventing threat actors from spreading to additional non-compromised devices.
Defender for Endpoint immediately disrupts attacks to contain IP addresses linked to devices that have not yet been found or that have not been onboarded read more about Microsoft Defender will isolate undiscovered endpoints to block attacks.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.