Collaborate Disseminate
Amazon wants to make it more difficult for attackers to compromise Amazon Web Services (AWS) root accounts, by requiring those account holders to enable multi-factor authentication (MFA). MFA options for AWS accounts AWS provides on-demand cloud comput… Continue reading Amazon: AWS root accounts must have MFA enabled
After making passkeys available for consumers in early May, Google is now rolling them out for Google Workspace and Google Cloud accounts. This feature will soon be available (in open beta) for more than 9 million organizations and aims to provide user… Continue reading Google extends passkeys to Google Workspace accounts
Users can now create passkeys for their Google account, the company has announced on Wednesday. Passkeys will enable users to sign in to their Google account on all major platforms and browsers with their fingerprint, face recognition, or a local PIN. … Continue reading You can now use passkeys to login into your Google account
Google has updated Google Authenticator, its mobile authenticator app for delivering time-based one-time authentication codes, and now allows users to sync (effectively: back up) their codes to their Google account. A long-awaited option Before this up… Continue reading Google Authenticator updated, finally allows syncing of 2FA codes
WhatsApp will be rolling out three new security features in the coming months, to provide users with increased privacy and control over their messages and to help prevent unauthorized account access and takeover. The new features The first feature is c… Continue reading WhatsApp announces features to prevent account takeover
Twitter has announced that starting with March 20, users who don’t pay the Twitter Blue subscription will no longer be able to use the SMS-based two-factor authentication (2FA) option. “While historically a popular form of 2FA, unfortunatel… Continue reading Twitter will start charging users for SMS-based 2FA option
Malicious third-party OAuth apps with an evident “Publisher identity verified” badge have been used by unknown attackers to target organizations in the UK and Ireland, Microsoft has shared. The attacks were first spotted by Proofpoint resea… Continue reading Attackers used malicious “verified” OAuth apps to infiltrate organizations’ O365 email accounts
Apple is expanding end-to-end encryption options for users and finally offering E2EE for their iCloud backup. Advanced Data Protection for iCloud “iCloud already protects 14 sensitive data categories using end-to-end encryption by default, includ… Continue reading Apple unveils end-to-end encryption for iCloud backup, Photos, etc.
“Win11 builds now have a DEFAULT account lockout policy to mitigate RDP and other brute force password vectors,” David Weston of Enterprise and OS Security at Microsoft, announced, just as the company confirmed that it will resume the rollo… Continue reading Microsoft adds default protection against RDP brute-force attacks
Customers of automaker General Motors (GM) and wedding planning company Zola have had customer accounts compromised through credential stuffing, and the criminals have used the access to redeem gift cards. What is credential stuffing? Credential stuffi… Continue reading GM, Zola customer accounts compromised through credential stuffing