Security Best Practices - 1

2025 (3)

October (1)

security: New Microsoft Secure Future Initiative (SFI) patterns and practices: Practical guides to strengthen security

Microsoft Security Blog

2025-10-07

Microsoft's Secure Future Initiative (SFI) patterns and practices provide practical, practitioner-focused guidance based on Microsoft's Zero Trust implementation. The resources aim to help organizations accelerate security maturity, reduce implementation friction, and build systems that are secure by design, default, and in operation.

September (2)

security: Retail at risk: How one alert uncovered a persistent cyberthreat

Microsoft Security Blog

2025-09-24

Microsoft's Cyberattack Series examines a retail incident where a single security alert exposed a persistent cyberthreat. Attackers exploited unpatched SharePoint vulnerabilities and compromised identities to infiltrate networks, causing widespread operational risk—echoed by industry statistics (60% operational disruptions, 43% breaches). Microsoft’s Detection and Response Team (DART) provided forensic analysis and actionable remediation guidance; the full report offers detailed findings and defensive recommendations.

terraform: 5 tips for credential management across multi-cloud

Terraform

2025-09-02

An InfoCert platform engineer outlines five best practices for securely managing credentials across multiple cloud providers, emphasizing principles (least privilege, short-lived/dynamic secrets), operational controls (centralized secret store, automated rotation, auditing), and using purpose-built tools to implement them safely and consistently.