גרסה 2.0.4 – המלצות חדשות, עדכוני תאימות ועוד!
לקוחות יקרים, 🌟
אנחנו שמחים להכריז על Griffin31 v2.0.4, עם תובנות אבטחה משופרות, המלצות מעודכנות, מסגרות תאימות חדשות ושיפורים חשובים בממשק. 🚀
מה חדש בגרסה 2.0.4?
🔔 המלצות שנוספו (Preview)
SharePoint
- Publicly accessible SharePoint sites detected.
- SharePoint sites allow Anonymous access.
- Default link type isn’t explicitly set to Specific People at the tenant level.
- Idle session sign-out not configured in SharePoint and OneDrive.
Microsoft Entra ID
- Conditional Access policies are not enforced for Protected Actions.
- Per-user MFA is enabled instead of Conditional Access-based MFA.
- Applications have certificates with expiration longer than 180 days.
- The password expiration policy is not set to never expire.
- Internal phishing protection for Microsoft Forms is not enabled.
- Customer Lockbox feature is not enabled.
- Third-party storage services are allowed in Microsoft 365 on the web.
Intune
- Windows Autopatch is not configured for automated update management.
- Windows Autopatch Hot-patch updates are not properly managed.
- macOS software updates are not configured in Intune.
Exchange Online
- Malware filtering & notifications are not enabled for all domains.
- Spam policies aren’t set to notify admins when internal senders are blocked.
- Priority account protection is not enabled and configured.
- Ensure Priority accounts have ‘Strict protection’ presets applied.
Defender for Endpoint
- Several advanced security features are not enabled.
🔄 המלצות מעודכנות
SharePoint & Exchange Online
- Unmanaged devices have unrestricted access to SharePoint Online data.
- Custom scripting is enabled in SharePoint Online, posing security risks.
- Guests can share items they do not own.
- Excessive external sharing permissions in OneDrive & SharePoint.
- Unrestricted download of attachments in Outlook for Windows from unmanaged devices.
- Retention policies aren’t configured for OneDrive, SharePoint, and Teams.
- Retention policies are not configured for Exchange Mailboxes.
✅ עדכוני תאימות
- ISO 27001 (Recommendations Updated)
- CIS Microsoft 365 (Recommendations Updated)
- SOC2 (Recommendations Updated)
- NIST (CFS) 2.0 (New)
- CIS CSC (New)
📖 סיפורים שנוספו
- Secure Collaboration in Microsoft (New)
- Exploits Device Code Authentication (New)
- Security Hygiene (Updated)
🐞 שינויים קטנים בממשק ותיקוני באגים
- החלק Insights עודכן לנראות טובה יותר.
- בהתחברות הראשונה צריך עכשיו לאשר את התנאים וההגבלות.
- שיפורים בחלק הדוחות, לבהירות רבה יותר.
לפרטים נוספים, פנו אלינו.
תודה שאתם חלק מ-Griffin31!
בברכה,
צוות Griffin31
