Cybersecurity Starts in the Boardroom
Threat actors abused open redirects on the Snapchat and American Express websites to steal credentials for Microsoft 365 accounts. URL Redirection to Untrusted Site (‘Open Redirect’) (mitre.org) Get some training sop this does not happen to you, or worse, your team. Cyber Awake | Train Your Team To Protect Against …
Continue reading “Microsoft 365 credentials stolen through redirects”
With the holiday season well underway, I thought we would take a look at the cyber security implications of the Out-of-Office notification:
Nancy Pelosi, a senior United States politician and Speaker of the United States House of Representatives, has now left after a short but controversial visit. China was not pleased about the visit. SANS has a report this morning on monitoring of Chinese reaction online – not blogs, news reactions, etc. …
Research is showing that with Microsoft now blocking Office VBA macros from the internet, threat actors are moving to other attachments that can execute malicious instructions, such as Windows Shortcut .lnk, .iso and .rar. As Microsoft blocks Office macros, hackers find new attack vectors (bleepingcomputer.com) My advice: Make sure your …
Disabling risky services for any OS or software “out-of-the-box” is always a good idea. If you need it, then you or your system administrators can enable it. A brute force attack is where a threat actor – or normally a threat actor computer – will try a range of different …
