Incident Responders Explore Microsoft 365 Attacks in the Wild
Mandiant experts discuss the novel techniques used to evade detection, automate data theft, and achieve persistent access.
Source: Dark Reading – Threat
[...]
AuthorKelly Sheridan Staff Editor
A New Approach to Securing Authentication Systems' Core Secrets
Researchers at Black Hat USA explain issues around defending “Golden Secrets” and present an approach to solving the problem.
Source: Dark Reading
[...]
New Normal Demands New Security Leadership Structure
At the inaugural Omdia Analyst Summit, experts discuss where the past year has created gaps in traditional security strategy and how organizations can
[...]
Researchers Create New Approach to Detect Brand Impersonation
A team of Microsoft researchers developed and trained a Siamese Neural Network to detect brand impersonation attacks.
Source: Dark Reading – Threat
[...]
Microsoft: Israeli Firm's Tools Used to Target Activists, Dissidents
Candiru sold spyware that exploited Windows vulnerabilities and had been used in attacks against dissidents, activists, and journalists.
Source: Dark Reading –
[...]
Microsoft Patches 3 Windows Zero-Days Amid 117 CVEs
The July Patch Tuesday release also includes the out-of-band fix for the Windows Print Spooler remote code execution flaw under attack.
Source:
[...]
Tool Sprawl & False Positives Hold Security Teams Back
Security teams spend as much time addressing false positive alerts as they do addressing actual cyberattacks, survey data shows.
Source: Dark Reading
[...]
Microsoft Confirms Acquisition of RiskIQ
RiskIQ’s technology helps businesses assess their security across the Microsoft cloud, Amazon Web Services, other clouds, and on-premises.
Source: Dark Reading –
[...]
Navigating Active Directory Security: Dangers and Defenses
Microsoft Active Directory, ubiquitous across enterprises, has long been a primary target for attackers seeking network access and sensitive data.
Source: Dark
[...]
New Framework Aims to Describe & Address Complex Social Engineering Attacks
As attackers use more synthetic media in social engineering campaigns, a new framework is built to describe threats and provide countermeasures.
Source:
[...]