Level Up Your Security: Why You Need a Dedicated SMS Authentication Phone In today’s digital landscape, security is paramount. We’re constantly bombarded with news of data breaches and account compromises. One of the most common and effective security measures is two-factor authentication (2FA), often delivered via SMS. But relying solely on your primary phone number,…
Note: Some of the research on this page has been done using Microsoft Copilot and Claude Cybersecurity breaches in government cities are a critical concern, and they can have significant consequences. See also a searchable list of reported cybersecurity Breaches A cyber incident will directly consume a company’s resources, leading to an increased cost of…
In a previous blog post, Improve email delivery and spoofing: DMIK, SPF and DMARC I explained the importance of protecting your email delivery and protection via standard internet protocols DMIK, SPF and DMARC. The one to I will talk to today is about services and tools use for unpacking the reporting piece, Domain-based Message Authentication,…
See also Blogs: The Cost of a Security Breach (Government) and Cybersecurity ( Extract from Original Data Source: MOVEit hack victim list | KonBriefing.com )
Ever had a lead go cold because they thought your email was spam? Or worse, had a customer almost fall for a phishing scam that looked like it came from your company? Email spoofing and phishing attacks pose a significant threat to businesses and individuals alike. To combat these threats and ensure legitimate emails reach…
We all know that the security landscape is complex and very fragmented and this is especially true in the endpoint side of the house. I ran across a post from Francis Odum from Contrary Research on my Linkedin feed, which did a great job at detailing the current state of the ecosystem market. I must…
Wow — That is a massive attack Incredible that the ability to execute this at this level exists. Hackers Launched Record DDoS Attack with 25.3 Billion Requests in 4 Hours (gbhackers.com)
If you have not seen it watch it 100% relevant for all of us in the cybersecurity space. Drones, hackers and mercenaries – The future of war | DW Documentary
Microsoft has been working hard in consolidating their security messaging and in the past 6- 12 months there has been a number changes to their product lines and names which has caused some confusion to customers and partners
In early May 2022, Microsoft announced the launch of their Microsoft Security Experts Services Security Experts is a new managed service category that combines expert-trained technology and product innovation with human-led services. Right now Microsoft is doing a lot of the work directly, but soon they will have multiple certified security expert partners Video introducing the…
I was doing a bit o research for a session I am doing later this week and came across a great video from a Wayne Chapin that explains in great detail why is Microsoft 365 (M365) is vital for IT Security Modernization…. His audience, IT managers provides an explanation of security concepts and maps it…
I need to stay up to date with the cybersecurity topics and aside from several news sources i check on a daily / weekly bases I also listen to the following podcasts: I found a lot more at this site Other News Resources / Sites: https://cybersecuritynews.com/ https://thehackernews.com/ https://cisoseries.com/ https://www.cnbc.com/cybersecurity/ https://www.wired.com/tag/cybersecurity/
A lot of changes to the Microsoft Security products line up . Looks like they are finally consolidating all of the products into some sort of logic sense… This is very good news, but it has created some confusion in the field — I am sure there will be more, so I will attempt to…
In today’s interconnected world, safeguarding your online accounts is paramount. Two-factor authentication (2FA) stands as a crucial defense against unauthorized access, adding an extra layer of security beyond just a password. While any form of 2FA is a significant improvement over relying solely on passwords, understanding the strengths and weaknesses of each method is essential….
We are just getting to know the amazing amount of work Microsoft focused on better securing their latest Windows 11 operating system.
The last couple of years (2020 & 2021) were particularly hard years for many organizations as it relate to cybersecurity. So many attacks in so many forms ranging from internal ones focused on getting specific data / information to highly organized ones focused on disrupting operations all the way to state sponsored ones focus on…
A good question popped this week in my email. How do I prevent users from saving files to local drives, while still allow them to save to OneDrive folders? I think a lot of organizations would like ( or are doing it already) to do this, but the answer may have some complexity to it…
Ransomware is rampant these days. The latest in the long list of of attacks is the one on Kaseya, an PC management service provider, and it is notable because the incident not only affects Kaseya’s IT management customers, but also those companies’ corporate clients that have outsourced IT management to them. The attack is reminiscent…
With all of the ransomware news as of late, companies are asking what kind of protection and what to do in case the protection fails and the need presents to recover from a cyber attack. Many of the organizations I interface are using Microsoft 365 and / or Office 365 already. So the natural question…
Today, cybercriminals have released over 8.4 billion passwords on the dark web. The largest collection of stolen passwords of all time. The 100GB text file includes usernames, email addresses and passwords. #cybersecurity #passwords #leaks #securitynews More info at: https://cybernews.com/security/rockyou2021-alltime-largest-password-compilation-leaked/
The uptick of recent cybersecurity incidents reported in the news as of late is up. The list is long and it has affected business of all sizes and in all industries. The sophistication of the attacks, and vulnerabilities they uncovered are only one side of the coin. Many of them are now truly affecting many lives, and livelihoods.
With the much needed renewed emphasis on security, and in combination with the always present topic of modern device management, I have been having lots of conversations about how to best secure customer’s environment. This is where the concepts and architecture of Zero Trust security fits so well. Zero Trust security is not a new…
Enabling Windows Autopilot allows devices to be pre-registered to your organization in Microsoft servers. As of this writing, there is very little risk in enabling Windows Autopilot within an organization. The most recommended security concept to fight against malware for years has been to remove admin rights from end users. When Microsoft introduced Windows 10…
Security threads are real and constant to every organization no matter how small or big they are. This weekend I just came across on of the best “easy-to-read” reports I have seen regarding securing data on the the cloud.
After rebranding Windows Defender as Microsoft Defender in early 2019, Microsoft has been consolidating most of their security-related products into their Microsoft Defender brand. In September 2020 they further announced the Microsoft 365 Defender cross-platform line to include: Microsoft 365 Defender (previously Microsoft Threat Protection) Microsoft Defender for Endpoint (previously Microsoft Defender Advanced Threat Protection) Microsoft Defender for…
Organizations need to stay up-to-date in their Windows 10 OS patching otherwise they introduce a lot of security risk and likely compliance governance issues.
This week I did my annual corporate security training and I really liked this story to illustrate how important is not to use different and strong passwords Don’t Let This Happen to You An online writer and journalist, suffered an identity theft that reads like a real-life horror story. As he describes it: “In the…
I am constantly asked by customers about the Microsoft Telemetry and what it collects – Privacy is a big topic everywhere, and data-driven design (think Tesla!) can be difficult to explain… This short segment video interview with Ed Bott explains the 4 types / layers of Telemetry: Video: Telemetry explained: Interview with Ed Bott Additional…
