Tag: multi-factor authentication (MFA)

FBI Warns of Scattered Spider’s Expanding Attacks on Airlines Using Social Engineering
News

FBI Warns of Scattered Spider’s Expanding Attacks on Airlines Using Social Engineering

According to the U.S. Federal Bureau of Investigation (FBI), the infamous cybercrime organization Scattered Spider has expanded its target base to include the airline industry. The agency claimed that in order to combat the activity and assist victims, it is actively collaborating with aviation and industrial partners. The FBI stated in a post on X that these attackers use social engineering tactics, frequently posing as workers or contractors, to trick IT help desks into allowing access. Many times, these strategies entail ways to get around multi-factor authentication (MFA), like persuading support desk staff to add unapproved MFA devices to compromised accounts. Additionally, third-party IT providers are frequently the focus of scattered spider assaults, which expose reliable ...
Botnet targets Basic Auth in Microsoft 365 password spray attacks
News

Botnet targets Basic Auth in Microsoft 365 password spray attacks

Password-spray assaults against Microsoft 365 (M365) accounts globally are being carried out by a vast botnet of more than 130,000 infected machines, which targets basic authentication in order to circumvent multi-factor authentication. According to a SecurityScorecard assessment, the attackers are targeting the accounts on a broad scale by using credentials that were acquired by infostealer malware. To get beyond Multi-Factor Authentication (MFA) safeguards and obtain unauthorized access without setting off security alerts, the assaults rely on non-interactive sign-ins using Basic Authentication (Basic Auth). Businesses that only use interactive sign-in monitoring are unaware of these threats read more about Botnet targets Basic Auth in Microsoft 365 password spray attacks. G...
Google Cloud to Enforce Multi-Factor Authentication by 2025 for All Users
News

Google Cloud to Enforce Multi-Factor Authentication by 2025 for All Users

In an attempt to strengthen account security, Google's cloud division has declared that it will require multi-factor authentication (MFA) for all users by the end of 2025. In a statement, Mayank Upadhyay, Google Cloud's distinguished engineer and vice president of engineering, said that the company would be introducing mandatory MFA for all users globally in 2025. Google Cloud will notify businesses and users in advance to assist plan MFA deployments and guarantee a seamless transition. Three phases are planned for the implementation process, which will begin this month and last until the end of 2025 read more about Google Cloud to Enforce Multi-Factor Authentication by 2025 for All Users. Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecur...