Collaborate Disseminate
In the wake of the widespread compromise of US telecom giants’ networks by Chinese hackers and the FBI advising Americans to use end-to-end encrypted communications, CISA is advising “highly targeted individuals” – senior govern… Continue reading CISA: Use Signal or other secure communications app
SUMMARY Cybersecurity researchers at Oasis Security have identified a vulnerability in Microsoft’s Multi-Factor Authentication (MFA), known as AuthQuake,… Continue reading AuthQuake Flaw Allowed MFA Bypass Across Azure, Office 365 Accounts
SUMMARY Cybersecurity researchers at Oasis Security have identified a vulnerability in Microsoft’s Multi-Factor Authentication (MFA), known as AuthQuake,… Continue reading AuthQuake Flaw Allowed MFA Bypass Across Azure, Office 365 Accounts
Forest Blizzard, a threat group associated with Russia’s GRU military intelligence service, repeatedly breached a US-based organization via compromised computer systems of nearby firms, which they leveraged to authenticate to the target’s e… Continue reading Faraway Russian hackers breached US organization via Wi-Fi
Read more about DNS hijacking and how organizations can prevent it. Continue reading Increasing Awareness of DNS Hijacking: A Growing Cyber Threat
Google has announced that, by the end of 2025, multi-factor authentication (MFA) – aka 2-step verification – will become mandatory for all Google Cloud accounts. “Given the sensitive nature of cloud deployments — and with phishing and… Continue reading All Google Cloud users will have to enable MFA by 2025
Iranian hackers are targeting critical infrastructure organizations with brute force tactics. This article explores their techniques, including MFA… Continue reading Iranian Hackers Target Microsoft 365, Citrix Systems with MFA Push Bombing
An international advisory says that the purpose of the “brute force” attacks is to sell the info to cybercrime forums.
The post Iranian hackers are going after critical infrastructure sector passwords, agencies caution appeared first on CyberScoop.
In this Help Net Security interview, Brian Pontarelli, CEO at FusionAuth, discusses the evolving authentication challenges posed by the rise of hybrid and remote workforces. He advocates for zero trust strategies, including MFA and behavioral biometric… Continue reading How hybrid workforces are reshaping authentication strategies
Researchers have unearthed a cryptographic vulnerability in popular Yubico (FIDO) hardware security keys and modules that may allow attackers to clone the devices. But the news is not as catastrophic as it may seem at first glance. “The attacker … Continue reading Vulnerability allows Yubico security keys to be cloned