Microsoft announced the launch of a new strategic security initiative focused on securing on-premises work environments, amid the increasing cyber threats that exploit artificial intelligence to accelerate the pace of attacks. The initiative aims to help organizations assess risks, reduce reliance on on-premises infrastructure where possible, and enhance the security of systems that must remain local.
Pillars of the Security Initiative
The initiative relies on three main axes: Understanding (identifying risks and prioritizing them), Mitigation (moving workloads to Microsoft 365 to benefit from cloud security), and Securing (enhancing protection for servers that cannot be moved).
On-Premises Baseline Security Mode
As part of this initiative, Microsoft is introducing "On-Premises Baseline Security Mode" for Exchange, SharePoint, and Skype for Business servers. This mode aims to:
- Automatic Updating: Starting in the first quarter of 2027, the company plans to automate the application of security updates after a specific period from their release for connected environments.
- More Secure Defaults: Moving toward hardened defaults that reduce the need for manual configuration by system administrators, while monitoring any configuration drift.
- Emergency Mitigation Service 2.0: Expanding the scope of the service to include SharePoint in January 2027, allowing the application of immediate preventive measures against emerging vulnerabilities before permanent updates are available.
Why This News Matters
This step represents a fundamental shift in Microsoft's approach, moving from merely providing security guidelines to embedding protection into the core products themselves. For organizations, this means reducing the manual effort required to maintain server security, and narrowing the time gap between vulnerability discovery and protection application, which is crucial in countering attacks that use AI tools to accelerate vulnerability exploitation.
Microsoft recommends that organizations begin evaluating their workloads and determining what can be moved to the cloud, while committing to updating remaining on-premises systems and enabling currently available protection tools.