RSS Reader for Computer Security Articles
Credit to Author: Pieter Arntz| Date: Sun, 08 May 2022 11:51:58 +0000
Three tech giants used World Password Day to announce their commitment to a passwordless future using FIDO Alliance standards.
The post Google, Apple, and Microsoft step hand in hand into a passwordless future appeared first on Malwarebytes Labs.
Read MoreCredit to Author: Jovi Umawing| Date: Thu, 28 Apr 2022 16:48:18 +0000
For the second time, the FBI has warned the food and agriculture sector about the risk of ransomware attacks.
The post FBI warns food and agriculture to brace for seasonal ransomware attacks appeared first on Malwarebytes Labs.
Read MoreCredit to Author: Pieter Arntz| Date: Wed, 16 Mar 2022 14:57:42 +0000
The FTC has taken action against CafePress for the cover up of a data breach. The company is accused of lax security and deceptive practices.
The post CafePress faces $500,000 fine for data breach cover up appeared first on Malwarebytes Labs.
Read MoreCredit to Author: Malwarebytes Labs| Date: Fri, 25 Feb 2022 18:54:27 +0000
Cybersecurity agencies in the US and UK have issued a joint cybersecurity advisory (CSA) on MuddyWater, an Iranian APT.
The post CISA warns of cyberespionage by Iranian APT “MuddyWater” appeared first on Malwarebytes Labs.
Read MoreCredit to Author: Malwarebytes Labs| Date: Wed, 09 Feb 2022 11:55:24 +0000
 | |
| Microsoft says its corporate users are not using MFA, another layer of security that keeps accounts safe. Unfortunately, this is not an isolated problem. Categories: Security world Tags: 2faAzure Active DirectoryCyber SignalGoogleGrzegorz Milkamfamicrosoftmulti-factor authenticationnpmtwittertwo-factor authentication |
The post Microsoft: Slow MFA adoption presents “dangerous mismatch” in security appeared first on Malwarebytes Labs.
Read MoreCredit to Author: Microsoft 365 Defender Threat Intelligence Team| Date: Wed, 26 Jan 2022 17:00:00 +0000
We uncovered a large-scale, multi-phase campaign that adds a novel technique to traditional phishing tactics by joining an attacker-operated device to an organization’s network to further propagate the campaign.
The post Evolved phishing: Device registration trick adds to phishers’ toolbox for victims without MFA appeared first on Microsoft Security Blog.
Read MoreCredit to Author: Pieter Arntz| Date: Tue, 28 Jan 2020 16:00:00 +0000
 | |
| Zero Trust is an information security framework that insists its users “never trust, always verify.” Is this the best security model for organizations today? We examine its strengths and weaknesses. Categories: Tags: byodcloudframeworkidentity managementinsider threatsIoTlateral threat movementmfaperimeterrdpsecuritysecurity orchestrationstrategyzero trustzero trust modelzero trust security model |
The post Explained: the strengths and weaknesses of the Zero Trust model appeared first on Malwarebytes Labs.
Read MoreCredit to Author: Elizabeth Wolk| Date: Wed, 15 Jan 2020 17:00:21 +0000
The goal of MFA implementation is to enable it for all your users, on all of your systems, all of the time. Learn how to successfully roll out and support MFA in your organization.
The post How to implement Multi-Factor Authentication (MFA) appeared first on Microsoft Security.
Read More