Search Results: multifactor authentication

Prepare: Microsoft Begins Disabling Basic Auth in Exchange Online Oct. 1

Microsoft and CISA are releasing more details and guides to help organizations move from legacy authentication methods in Exchange Online.

June 30, 2022 Zachary Comeau Leave a Comment

Microsoft and U.S. cybersecurity officials renewing calls for organizations to switch from Basic Authentication (Basic Auth) in Microsoft Exchange Online to Modern Authentication before the company begins to disable Basic Auth in October. Microsoft on Oct. 1 will begin turning off the ability to use Basic Auth in Exchange Online for Exchange ActiveSync (EAS), POP, […]

Tenable: Ransomware-as-a-Service is Booming

A new report from Tenable details the lucrative ransomware industry and how cybercrime has matured into a business-like ecosystem.

June 22, 2022 Zachary Comeau Leave a Comment

The subscription economy adopted by the software industry is growing ransomware from what was once a fledgling threat to an IT security crisis as ransomware groups continue to pad their wallets and grow the ransomware-as-a-service economy, according to a new report from Tenable. According to the Maryland-based vulnerability management software company, that service model is […]

Microsoft to Roll Out Security Defaults to All Microsoft Customers

Microsoft is bringing security defaults to existing customers who haven't rolled out security defaults or Azure AD Conditional Access.

May 27, 2022 Zachary Comeau Leave a Comment

Microsoft has begun rolling out security defaults to existing Microsoft customers who have yet to roll out security defaults or Azure AD Conditional Access, helping tenants created before October 2019 better secure their IT environments. Microsoft introduced security defaults in the fall of 2019 for new tenants, which included multifactor authentication (MFA) and modern auth […]

Trellix Report Gauges Cyber Readiness of Indian, Australian and Japanese Government Agencies and Critical Infrastructure Providers

April 14, 2022 TechDecisions Staff Leave a Comment

Survey Respondents Identify Software Supply Chain and Cybersecurity Skills Shortages as Key Challenges; Cyber Defense Coordination and Threat Data Sharing Identified as Areas of Opportunity for More Government Leadership  News Highlights New Trellix report finds 89 percent of respondents from India, Japan and Australia believe government-led initiatives can play a critical role in enhancing nations’ […]

Trellix Report Reveals Key U.S. Critical Infrastructure Providers Lack Advanced Cyber Defenses

April 14, 2022 TechDecisions Staff Leave a Comment

Majority of U.S. Providers in Oil & Gas, Healthcare, and State & Local Emergency Services Have Not Implemented Full Cybersecurity Capabilities due to Lack of In-House Cyber Skills News Highlights 77% of respondents from U.S. state and local governments in charge of emergency services have not fully implemented endpoint detection and response (EDR) and extended […]

Trellix Report Gauges Cyber Readiness of German, British and French Government Agencies and Critical Infrastructure Providers

April 14, 2022 TechDecisions Staff Leave a Comment

NATO Survey Respondents Identify Software Supply Chain and Cybersecurity Skills Shortages as Key Challenges; Cyber Defense Coordination and Threat Data Sharing Identified as Areas of Opportunity for Government Leadership News Highlights New Trellix report finds 87 percent of respondents from Germany, France and United Kingdom believe government-led initiatives can play a critical role in enhancing […]

Lapsus$ Attacks: Microsoft Says Group Pays Employees For Initial Access; Okta Provides Attack Timeline

Microsoft and Okta provide more details on the Lapsus$ hacking group, including how it gains initial access and impacts to both companies.

March 23, 2022 Zachary Comeau Leave a Comment

Microsoft acknowledges Lapsus$ accessed source code, downplays risk to customers and risk of elevation Lapsus$ uses extensive social engineering, including paying victims’ employees for initial access and convincing help desks to reset credentials Group uses VPNs, RDP, VDI and identity providers such as Azure AD, Okta in attacks Okta says 2.5% of customers potentially impacted […]

The Amount Of Passwords End Users Have Is Leading To Poor Security Habits

Employees are struggling with too many passwords, which is leading to poor password hygiene and increased cyber risk.

March 10, 2022 Zachary Comeau Leave a Comment

The IT industry continues to hammer home the idea that identity security and password hygiene are often the first lines of defense when it comes to cyberattacks, yet organizations continue to engage in poor practices and have trouble balancing security requirements and user experiences. Just recently, we have covered several studies from IT companies about […]

The Most Common Passwords Used In Brute Force & Spraying Attacks

Despite an increased focus on identity and password security, common passwords continue to be vulnerable to attack, Specops report finds.

March 9, 2022 Zachary Comeau Leave a Comment

Despite an increased focus on identity, multifactor authentication and password security, passwords continue to be vulnerable to attack, according to a new report from password security provider Specops Software. According to the study, The 2022 Weak Password Report, 93% of password attacks use passwords with at least eight characters, suggesting that attackers are aware of […]

SpyCloud Launches Solution to Prevent Fraud from Compromised Web Sessions

March 9, 2022 TechDecisions Staff Leave a Comment

SpyCloud’s Session Identity Protection offers unparalleled early warning of malware-infected consumers to stop “trusted user fraud.” AUSTIN, Texas–(BUSINESS WIRE)–#cyber–SpyCloud, the leader in account takeover and fraud prevention, today announced the launch of Session Identity Protection, a transformative early warning system designed to prevent trusted user fraud, one of the hardest forms of fraud to detect. […]