-
Amazon to make MFA mandatory for 'root' AWS accounts by mid-2024
Amazon will require all privileged AWS (Amazon Web Services) accounts to use multi-factor authentication (MFA) for stronger protection against account hijacks leading to data breaches, starting in mid-2024.
- October 05, 2023
- 01:06 PM
2
-
Retool blames breach on Google Authenticator MFA cloud sync feature
Software company Retool says the accounts of 27 cloud customers were compromised following a targeted and multi-stage social engineering attack.
- September 15, 2023
- 03:15 PM
3
-
Webinar: The state of shadow AI in 2026 (and how attackers are taking advantage)
AI adoption has exploded, but every new app, integration and extension introduces new threats and risks.
The latest webinar from Push Security uncovers the scale of Shadow AI in the enterprise, how attackers are taking advantage, and what security teams can do about it.
-
W3LL phishing kit hijacks thousands of Microsoft 365 accounts, bypasses MFA
A threat actor known as W3LL developed a phishing kit that can bypass multi-factor authentication along with other tools that compromised more than 8,000 Microsoft 365 corporate accounts.
- September 06, 2023
- 06:33 AM
- 2
-
Ongoing Duo outage causes Azure Auth authentication errors
Cisco-owned multi-factor authentication (MFA) provider Duo Security is investigating an ongoing outage that has been causing authentication failures and errors starting three hours ago.
- August 21, 2023
- 12:26 PM
- 0
-
LastPass users furious after being locked out due to MFA resets
LastPass password manager users have been experiencing significant login issues starting early May after being prompted to reset their authenticator apps.
- June 24, 2023
- 10:15 AM
- 0
-
Google will add End-to-End encryption to Google Authenticator
Google is bringing end-to-end encryption to Google Authenticator cloud backups after researchers warned users against synchronizing 2FA codes with their Google accounts.
- April 26, 2023
- 05:11 PM
- 4
-
Outlook app to get built-in Microsoft 365 MFA on Android, iOS
Microsoft will soon fast-track multi-factor authentication (MFA) adoption for its Microsoft 365 cloud productivity platform by adding MFA capabilities to the Outlook email client.
- March 13, 2023
- 01:07 PM
- 1
-
Bitwarden password vaults targeted in Google ads phishing attack
Bitwarden and other password managers are being targeted in Google ads phishing campaigns to steal users' password vault credentials.
- January 26, 2023
- 04:40 PM
- 19
-
14 Cybersecurity Best Practices to Instill In Your End-Users
While it can be difficult to prevent all users' "bad" behavior, there are several cybersecurity best practices to train and regularly remind your employees of.
- January 04, 2023
- 10:05 AM
- 0
-
MFA Fatigue attacks are putting your organization at risk
A common threat targeting businesses is MFA fatigue attacks—a technique where a cybercriminal attempts to gain access to a corporate network by bombarding a user with MFA prompts. This article includes some measures you can implement to prevent these types of attacks.
- November 15, 2022
- 10:07 AM
- 1
-
Robin Banks phishing service returns to steal banking accounts
The Robin Banks phishing-as-a-service (PhaaS) platform is back in action with infrastructure hosted by a Russian internet company that offers protection against distributed denial-of-service (DDoS) attacks.
- November 04, 2022
- 11:48 AM
- 2
-
What the Uber Hack can teach us about navigating IT Security
The recent Uber cyberattack shows us the myriad tactics employed by threat actors to breach corporate networks. Learn more about these tactics used and how to navigate IT Security.
- October 13, 2022
- 10:05 AM
- 0
-
Hackers stealing GitHub accounts using fake CircleCI notifications
GitHub is warning of an ongoing phishing campaign that started on September 16 and is targeting its users with emails that impersonate the CircleCI continuous integration and delivery platform.
- September 22, 2022
- 09:40 AM
- 0
-
MFA Fatigue: Hackers’ new favorite tactic in high-profile breaches
Hackers are more frequently using social engineering attacks to gain access to corporate credentials and breach large networks. One component of these attacks that is becoming more popular with the rise of multi-factor authentication is a technique called MFA Fatigue.
- September 20, 2022
- 06:30 AM
- 1
-
Okta one-time MFA passcodes exposed in Twilio cyberattack
The threat actor behind the Twilio hack used their access to steal one-time passwords (OTPs) delivered over SMS to from customers of Okta identity and access management company.
- August 28, 2022
- 01:15 PM
- 0
-
Hackers use AiTM attack to monitor Microsoft 365 accounts for BEC scams
A new business email compromise (BEC) campaign has been discovered combining sophisticated spear-phishing with Adversary-in-The-Middle (AiTM) tactics to hack corporate executives' Microsoft 365 accounts, even those protected by MFA.
- August 24, 2022
- 11:53 AM
- 0
-
Russian APT29 hackers abuse Azure services to hack Microsoft 365 users
The state-backed Russian cyberespionage group Cozy Bear has been particularly prolific in 2022, targeting Microsoft 365 accounts in NATO countries and attempting to access foreign policy information.
- August 19, 2022
- 11:10 AM
- 0
-
Microsoft accounts targeted with new MFA-bypassing phishing kit
A new large-scale phishing campaign targeting credentials for Microsoft email services use a custom proxy-based phishing kit to bypass multi-factor authentication.
- August 03, 2022
- 02:02 PM
- 0
-
Microsoft: Phishing bypassed MFA in attacks against 10,000 orgs
Microsoft says a massive series of phishing attacks has targeted more than 10,000 organizations starting with September 2021, using the gained access to victims' mailboxes in follow-on business email compromise (BEC) attacks.
- July 12, 2022
- 01:02 PM
- 0
-
Microsoft, Apple, and Google to support FIDO passwordless logins
Microsoft, Apple, and Google announced today plans to support a common passwordless sign-in standard (known as passkeys) developed by the World Wide Web Consortium (W3C) and the FIDO Alliance.
- May 05, 2022
- 12:19 PM
- 5
