This original post was made on 23 August 2022 Update 21 October 2022 There has been another “mis-configuration story this week – Microsoft exposed thousands of client records when they mis-configured a server. Following a report in the summer of patient information leaking from a health care company because of …
New simple security feature in Windows
The latest release of Windows 11, now includes Enhanced Phishing Protection, which sounds complicated, and I am sure the implementation of it is complex, but the security advantage it offers is obvious and simple. Windows 11 will warn you when you type a password into an insecure website or application. …
Microsoft Teams is keeping security tokens in plain text… and more UPDATED 23 September 2022
The original post was published on 16 September 2022 This is a real problem, no software or system should keep any security token in plain text, any time during operation. The user base for Microsoft Teams is in excess of 270 million users – we are part of that number …
Microsoft 365 automatic updates
As part of a good cyber security plan, I always recommend using automatic updates with remote monitoring and management software in place to check things are really happening. (Our Operations Manager has just read this and wants me to add that some servers are exceptions to this rule and they …