Cybersecurity Starts in the Boardroom
Microsoft has been monitoring and seeing an increase in attacks using malicious OAuth applications, installed on compromise cloud servers that then facilitate mass spamming from Exchange Online servers. Malicious OAuth applications abuse cloud email services to spread spam – Microsoft Security Blog The attack started with the threat actor launching …
Continue reading “Mass spamming starts with no MFA and credential stuffing”
…with great power there must also come — great responsibility! Stan Lee – Amazing Fantasy #15 (1962) A company with little accountability can blacklist your organisation’s email servers and not tell you why – and your hosting company pays for the privilege: Sp*mh**s warns email hygiene has worsened • The …
Continue reading “Is your email server blacklisted? The Peter Parker Principle.”
This was going to be a “weekend read” but I thought it was important enough to be part of the main news feed. For an email phishing scam to work it has to, in some way, make you trust it. This exploitation of your trust is called social engineering and …
Continue reading “Email scams – how hard is it to spot them?”
