article thumbnail

Cybersecurity Snapshot: Tips for cloud configs, MSP vetting, CISO board presentations

Tenable

Block legacy authentication protocols. Privilege account management, including role-based access and authentication management. Systems management. In another, it used credentials stolen via phishing to log into a VPN server that wasn’t protected with multifactor authentication (MFA.). Microsoft Azure Active Directory.

Cloud 52
article thumbnail

Runa Sandvik’s new startup Granitt secures at-risk people from hackers and nation states

TechCrunch

Journalists and activists are increasingly targeted by the wealthy and resourceful who seek to keep the truth hidden, from nation-state aligned hackers hacking into journalist’s inboxes to governments deploying mobile spyware to snoop on their most vocal critics. When The New York Times was hacked by China in 2012, that was phishing.

Spyware 308
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

The Top 5 Mobile Security Threats and How to Mitigate Them

Palo Alto Networks

Mobile Malware: Every website visited or link clicked has the potential to infect mobile devices with malware, such as spyware, ransomware, Trojan viruses, adware and others. Help employees keep mobile operating systems and security patches up to date. . Keep up to date on the ever-changing mobile security threat landscape.

Mobile 10
article thumbnail

Congratulations to the Winners Who Escaped the Dreaded Haunted House of IT

Kaseya

The Weapon: Two-Factor Authentication. Two-Factor Authentication (2FA), a form of multi-factor authentication, uses a second layer of authentication to access your systems by requiring users to provide a password (something they know) and a mobile app or token (something they have). The Threat: Malware.

article thumbnail

Zero-Day: Vulnerabilities, Exploits, Attacks and How to Manage Them

Kaseya

Those tools also take an inventory of all IT assets, such as servers, desktops, virtual machines, operating systems, applications and active ports, on each machine to scan them for security flaws. The infection can take the form of a virus, Trojan horse, worm, spyware, adware, rootkit or other malware like ransomware.

article thumbnail

Radar Trends to Watch: August 2022

O'Reilly Media - Ideas

Perhaps the scariest exploit in security would be a rootkit that cannot be detected or removed , even by wiping the disk and reinstalling the operating system. AWS is offering some customers a free multi factor authentication (MFA) security key. Lost passwords are an important attack vector for industrial systems.