Upcoming July, 2024 will be a big deal for securing Microsoft tenants world wide. Microsoft announced on May 14th that they will enforce tenant-level (I like to say tenant-wide) MFA requirement for all Azure users. Let’s quickly look at this…
One of the things we can do to protect our organization from account takeover attacks is to use locations as one of the conditions in our Conditional Access policies. Relying on location signal alone is not a good practice, but…
I have been recently diving head first into the world of tokens and cookies. One of my customer’s is trying to prevent token and cookie theft and it has got me digging more information and deeper. I bet you have…
This is part 4 of 4 part series. If you haven’t read previous parts of the blog series, I suggest reading them first: go to part 1 Not all authentication methods are created equal. Microsoft Digital Defense report from 2023…
This is part 3 of 4 part series. If you haven’t read previous parts of the blog series, I suggest reading them first: go to part 1 Not all authentication methods are created equal. Microsoft Digital Defense report from 2023…
Mikko Hyppönen, or simply Mikko, is a Chief Research Officer at WithSecure and a public figure, speaker, podcaster and probably many other things. His most recent book ‘If it’s smart, it’s vulnerable’ was published in August 2022 and I read…
Defense in depth is a concept in cybersecurity that implements a multi-layered security measure strategy to protect data and digital assets. Should a cybercriminal bypass one security control, he would still have to face multiple other security controls in order…
This is part 2 of 4 part series. If you haven’t read part 1 of the blog series, I suggest reading it first: go to part 1 Not all authentication methods are created equal. Microsoft Digital Defense report from 2023…
In this blog post I’m going to open my thoughts about five things from this year’s Digital Defense Report by Microsoft which they have been publishing since September 2020. Digital Defense Report is an annual report by Microsoft Security which…
Not all authentication methods are created equal. Microsoft Digital Defense report from 2023 lists multi-factor authentication as one of five key protection controls against cyber attacks. As leaks like recent Okta and LastPass breaches are becoming more and more common,…
