I have written about “going passwordless” and using passkeys before, but it looks like 2024 is going to be the year of the passkey. Here is an excellent explanation from the BBC – take just two and a half minutes and find out why you and your organisation need to …
Bugged by Phishing Email Attacks
Let’s start the “Wednesday Bit” for 2024 with a tale of phishing emails, but first… I hope you had a Happy Christmas and New Year. Diana and I did. We did take some time off, spent it with family, travelled a bit and paid rather less attention to our email …
Unsolicited MFA prompts
Last Wednesday I published my MFA Primer series and part two looks at this type of cyber attack against multi-factor authentication. In brief when the threat actors have a valid set of credentials they repeatedly try and access the service with them, generating multiple MFA requests to your authenticator app. …
Microsoft takes a stand
This one action is not going to stop cyber-crime, but Microsoft has seized rogue domains in the past and there is no doubt that it has an impact on the threat actor’s illicit infrastructure. Microsoft seizes websites used to sell phony email accounts • The Register Your takeaway from this …
MFA – A Primer
For the Wednesday Bit this week I am going to point you at a series I recently wrote about multi-factor authentication (MFA) – whilst I go out and do some Christmas Shopping! MFA is an important part of any cyber security plan and you should at least understand the basics …
