Search Results: multifactor authentication

Dell, Cybersecurity, Security, Zero Trust, Project Fort Zero

Dell Technologies Accelerates Zero Trust Adoption with New Ecosystem

Dell creates Zero Trust ecosystem with over 30 tech and security companies to simplify adoption for organizations.

April 19, 2023 Alyssa Borelli Leave a Comment

To help private and public sector organizations simplify Zero Trust adoption, Dell is building a new ecosystem. It will bring together more than 30 leading technology and security companies to create a unified solution across infrastructure platforms, applications, clouds and services. Together with the Maryland Innovation Security Institute (MISI), Zero Trust Center of Excellence, Dell […]

Security Awareness Training Needs to Change. Here’s Why.

Phishing is still wildly successful and a tried-and-true way into any organization's network, and security awareness training needs to evolve.

March 21, 2023 Zachary Comeau Leave a Comment

Despite repeated urges from IT professionals to be wary of clicking on links in emails and opening attachments from strange messages, phishing is still wildly successful as attackers adopt new tricks and techniques that should force organizations to improve and update their cybersecurity awareness strategies. In fact, email-based phishing attacks remain a thorn in the […]

Phishing Remains a Favorite Hacking Tool as New Methods Emerge

New methods such as phone-oriented attack delivery and MFA bypass are making phishing attacks more sophisticated, according to Proofpoint.

March 3, 2023 Zachary Comeau Leave a Comment

Phishing, social engineering, and ransomware remain favorite attack methods of cybercriminals, but threat actors are beginning to shift to newer techniques, such as phone-oriented attack delivery and adversary-in-the-middle phishing proxies designed to bypass multifactor authentication, according to cybersecurity firm Proofpoint. The Sunnyvale, Calif.-based company’s’ State of the Phish report finds that email-based phishing attacks remain […]

What CISA Learned After Conducting a Red Team Assessment of a Large Critical Infrastructure Organization

CISA obtained persistent access to the organization's network, but security controls like MFA helped thwart further activity.

March 1, 2023 Zachary Comeau Leave a Comment

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released a new advisory that describes a CISA red team assessment of a large critical infrastructure organization with a mature cyber posture, with the goal of sharing its key findings to help IT and security professionals improve monitoring and hardening of networks. According to the advisory, […]

LastPass Hack: Attacker Accessed DevOps Engineer’s Home Computer to Steal Decrpytion Keys

LastPass reveals new information on its ongoing investigation into a security incident, including how a developer's home computer was hacked.

February 28, 2023 Zachary Comeau Leave a Comment

[Editor’s note: This article has been updated to reflect the company’s official statement on the new updates.] The same threat actor that accessed portions of the LastPass development environment and source code that has forced the company since August 2022 to provide updates as new information is revealed, apparently accessed a shared cloud-storage environment obtained […]

Beyond Identity Receives FIDO2 Certification

Beyond Identity says it has received FIDO2 certification and can help companies adopt standards-based passwordless authentication.

January 13, 2023 Zachary Comeau Leave a Comment

Passwordless technology and phishing-resistant multifactor authentication provider Beyond Identity says it has received FIDO2 certification and can help companies adopt standards-based passwordless authentication. FIDO2, developed by the FIDO Alliance, is a more secure standard that enables users to leverage common devices to easily authenticate online services in both mobile and desktop environments. The FIDO Alliance […]

These are Microsoft’s 5 Identity Priorities in 2023

Microsoft outlines its five identity security priorities for the new year, with Entra tools as the key solution.

January 10, 2023 Zachary Comeau Leave a Comment

With cybercriminals hellbent on stealing passwords and compromising credentials, identity has become the new cybersecurity battleground, with Microsoft reporting more than 111 million password attacks a day. The Redmond, Wash. tech giant’s analysis of identity attacks doesn’t stop there, as the company says password breach replay attacks grew to 5.8 billion per month in 2022, […]

Microsoft Brings FIPS 140 Compliance to Authenticator on iOS

Microsoft is bringing FIPS 140 compliance for Microsoft Authenticator on iOS devices for organizations with security and compliance concerns.

December 14, 2022 Zachary Comeau Leave a Comment

Microsoft says it is bringing FIPS 140 compliance for Microsoft Authenticator on iOS devices for organizations with security and compliance concerns. In a Tech Community blog, the Redmond, Wash.-based IT giant says many of its customers that work in environments with security and compliance requirements need authenticators to use cryptography validated by the Federal Information […]

Hackers are Increasing Token Theft Attacks to Bypass MFA

Microsoft says it has seen an increase in attackers utilizing token theft to compromise identities that have completed MFA.

November 22, 2022 Zachary Comeau Leave a Comment

Organizations are increasing their implementation of multifactor authentication (MFA) to help secure account credentials and prevent unauthorized access, but threat actors are similarly advancing their techniques and are finding ways around those protections, including stealing tokens, according to Microsoft. In a recent post, Microsoft says its Detection and Response Team has seen an increase in […]

Microsoft Releases Preview of Azure AD CBA Support on Mobile Devices via YubiKey

Azure AD CBA on iOS and Android via the YubiKey gives admins the ability to require phishing-resistant MFA on mobile without having to provision certificates on the user’s mobile device.

November 2, 2022 Zachary Comeau Leave a Comment

Microsoft is releasing the public preview of Azure Active Directory (AD) Certificate-based Authentication (CBA) on iOS and Android devices using certificates on hardware security keys from Yubico. The company first announced the general availability of Azure AD CBA during Ignite 2022 as part of the company’s commitment to President Joe Biden’s executive order on improving […]