How Major Companies Are Honoring Cybersecurity Awareness Month

October 8, 2024 at 01:04PM Cybersecurity Awareness Month promotes security best practices and empowers organizations to create a culture of security. Companies like AWS, IBM, Intuit, SentinelOne, and Gallo use this month to educate, engage, and inspire their employees and communities. Programs include online and physical security training, expert-led discussions, and educational initiatives for students. … Read more

Microsoft Will Require MFA for Azure Services

August 20, 2024 at 06:42AM Microsoft will make multi-factor authentication (MFA) mandatory for all Azure customers starting in October. This measure aims to reduce the risk of account compromise and data breaches. Notifications will be sent out to customers to prepare for the enforcement date, and various MFA options will be available, with exceptions until … Read more

Unlocking the Front Door: Phishing Emails Remain a Top Cyber Threat Despite MFA

August 14, 2024 at 11:16AM Email attacks have dramatically increased, with Abnormal Security’s H1 2024 analysis showing a 50% rise from H2 2023. CISO Mike Britton discusses the limitations of Multi-Factor Authentication (MFA), reasons for email attacks’ popularity, and the potential impact of AI on phishing. The report also highlights the surge in file-sharing attacks … Read more

MFA Spamming and Fatigue: When Security Measures Go Wrong

January 18, 2024 at 08:03AM Multi-factor authentication (MFA) is increasingly used by organizations to bolster security, as traditional password-only systems are vulnerable to cyberattacks. However, MFA spamming, a tactic where attackers inundate users with verification requests, poses a threat. Mitigation strategies include strong password policies, end-user training, rate limiting, and monitoring systems. Strengthening security measures … Read more

The SANS Holiday Hack Challenge is back!

December 14, 2023 at 04:12AM The 2023 SANS Holiday Hack Challenge is a festive and educational opportunity for those interested in or working in cyber security. With cyber attacks on the rise during the holiday season, the challenge aims to enhance skills and combat threats like phishing scams and DDoS attacks. The competition covers various … Read more