Every organization is on a zero-trust journey. Learn about how critical identity is to your security evolution, and how your organization can move forward.

from Dark Reading https://ift.tt/LNfwPsW
via IFTTT

An insider threat or remote attacker with initial access could exploit CVE-2022-31676 to steal sensitive data and scoop up user credentials for follow-on attacks.

from Dark Reading https://ift.tt/Xo1ZQ0B
via IFTTT

In a widespread campaign, threat actors use a compromised Dynamics 365 Customer Voice business account and a link posing as a survey to steal Microsoft 365 credentials.

from Dark Reading https://ift.tt/xQy63CW
via IFTTT

Increasing complexity in IT continues to lead to breaches and compromises, highlighting the need for more holistic approaches to cyber protection.

from Dark Reading https://ift.tt/QTxmthE
via IFTTT

SolarWinds CISO Tim Brown explains how organizations can prepare for eventualities like the nation-state attack on his company’s software.

from Dark Reading https://ift.tt/kg81ubP
via IFTTT

Avoid the disconnect between seeing the value in threat modeling and actually doing it with coaching, collaboration, and integration. Key to making it “everybody’s thing” is communication between security and development teams.

from Dark Reading https://ift.tt/Iw96lhR
via IFTTT

Three of the world’s leading browsers were measured for phishing and malware protection, with time to block and protection over time as key metrics in test scores.

from Dark Reading https://ift.tt/WVxQk40
via IFTTT