One of the things that came out of the conference I attended on Tuesday in London, was defence in depth, combatting the ways in which the threat actors have expanded their attack vectors and tactics to evade various modern technical and human defences. The message we should all take from …
Let’s catch-up with CISA
The US government Cybersecurity and Infrastructure Security Agency (CISA) is one of the resources we use both here and at Octagon Technology to keep up with systems that need patching because of vulnerabilities. I have been out of the office a lot recently, my team have been monitoring for our …
Today
I have been attending a cyber security conference today – read some of the details here: Cyber Security Conference – Clive’s Blog it was a good day – I learnt some new things and was reminded of stuff I knew but had not thought about for a while. I am …
Microsoft raises the security bar
Microsoft is going to automatically deploy a policy for many of it’s customers that will make it mandatory for administrator users to use MFA. Microsoft will roll out MFA-enforcing policies for admin portal access (bleepingcomputer.com) Of course the admins could turn this policy off – but why would they? Watch …
We have done passwords, now let’s do MFA
Following on from the Back-to-Basics Password Primer mini-series – my latest article on CyberAwake is discussing the basics of multi-factor authentication (MFA): Back to Basics – MFA – CyberAwake In the next part I am going to discuss some of the weaknesses in MFA as a cyber security tool. Back …