May 20, 2020

New Microsoft Azure AD Sign-In Page Spoofed in Numerous Phishing Campaigns

2 min read - Microsoft discovered numerous phishing campaigns in which malicious actors attempted to spoof its new Azure AD sign-in page.

Intelligence & Analytics February 10, 2020

How to Create Value With Your (Security) Data Analytics Program

4 min read - The key factor in the success of any data analytics program, security-focused or otherwise, is how efficient and business-fit the underlying data architecture is.

CISO January 27, 2020

Gaining Insight Into the Ponemon Institute’s 2020 Cost of Insider Threats Report

4 min read - In our release of the 2020 Cost of Insider Threats report, we cover details on the cost of insider threats by industry and the tools and activities that can help reduce the risk of insider threats.

January 14, 2020

Microsoft Sway Domains Used in Phishing Campaigns to Create Bogus Landing Pages

2 min read - A phishing technique that makes use of Microsoft Sway could attack organizations even if they don't use the tool, security researchers warn.

Software Vulnerabilities December 16, 2019

TP-Link Archer Router Vulnerability Voids Admin Password, Can Allow Remote Takeover

7 min read - If exploited, this router vulnerability can allow a remote attacker to take control of the router's configuration without authentication, putting personal and business data at risk.

December 10, 2019

Malicious Office 365 App Leveraged by Phishing Campaign to Access Victims’ Accounts

2 min read - A phishing campaign is using a malicious Microsoft Office 365 app to access victims' accounts without stealing their credentials.

November 25, 2019

DePriMon: Malicious Downloader Registers as Windows Print Monitor to Avoid Detection

2 min read - A malicious downloader known as DePriMon uses the "Windows Default Print Monitor" name to avoid detection on Windows machines.

Identity & Access November 13, 2019

The Principle of Least Privilege Makes Total Sense, But How Do You Put It to Work?

5 min read - The principle of least privilege can create balance between security, risk and productivity. The benefits are clear, but how can you adopt this approach to identity and access management?

Cloud Security October 21, 2019

How to Make Cryptography Services Work for Your Organization

4 min read - Organizations consider certificate management and key management a commodity, and many seem to struggle to get this right. However, there's more to cryptography than encryption, keys and certificates.

October 7, 2019

Attackers Exploit Certified Emails to Target Italians With sLoad Malware

2 min read - Threat actors are using certified emails to target Italian users with samples of the sLoad malware family.