Microsoft disclosed on Jan. 19 that a nation-state backed attack occurred beginning in November 2023 in which the Russian state-sponsored...more
multifactor authentication
New CISA and NSA Identity and Access Management Guidance Puts Vendors on Notice
The National Security Agency and the Cybersecurity and Infrastructure Security Agency published on October 4, 2023, a document titled Identity...more
Massive EvilProxy Phishing Attack Campaign Bypasses 2FA, Targets Top-Level Executives
This attack sent approximately 120,000 phishing emails to organizations worldwide with the goal to steal Microsoft 365 credentials. Image: ronstik/Adobe...more
RSA: Cisco launches XDR, with focus on platform-based cybersecurity
Cisco took the stage at RSA 2023 to tout extended detection and response as key to a unified cross-domain security...more
Massive adversary-in-the-middle phishing campaign bypasses MFA and mimics Microsoft Office
Microsoft has already seen millions of phishing emails sent every day by attackers using this phishing kit. Learn how to...more
