Day: October 17, 2024

Threat actors exploit zero days within 5 days, says Google’s Mandiant

In analyzing 138 actively exploited vulnerabilities in 2023, Google Mandiant reported Oct. 15 that 70% of them were zero-days, indicating that threat actors are getting much better at identifying vulnerabilities in software. It’s a worrying trend in and of itself, but what caused even more concern among security analysts was that Google Mandiant also found […]

Oktane 2024: Standardizing identity security for SaaS applications — Arnab Bose

Today, there isn’t an identity security standard for enterprise applications that ensures interoperability across all SaaS and IDPs. There also isn’t an easy way for an app, resource, workload, API or any other enterprise technology to make itself discoverable, governable, support SSO and SCIM and continuous authentication. This lack of standardization is one of the […]

Oktane 2024: Building a company culture focused on security – Charlotte Wylie

Whether it’s phishing techniques, password spraying, or social engineering, security leaders today are constantly needing to see past blindspots, educate their workforces, and rethink the enterprise security checklist. Many companies, like Okta, are finding ways to incorporate security within their company culture, as every employee has a role to play in keeping a company secure. […]

Addressing Cybersecurity Disparities – Erin Baudo Felter – OKT24 #2

Addressing Cybersecurity Disparities – Erin Baudo Felter – OKT24 #2 Source link

Staying Ahead of Identity Threats – David Bradbury – OKT24 #2

David Bradbury is the Chief Security Officer at Okta. He oversees security execution, and is responsible for a team navigating the evolving threat landscape to best protect employees and customers. He is also at the forefront of helping Okta’s customers adopt and accelerate Zero Trust security strategies. Prior to Okta, David was the Senior Vice […]

Oktane 2024: Okta tackles bad MFA practices

Okta has thrown its weight behind the effort to help companies up their game when it comes to multi-factor authentication. One theme from the identity management vendor’s 2024 Oktane conference has been getting away from vulnerable MFA methods and implementations. In particular, Okta wants to galvanize the industry around efforts to move from SMS message […]

Anonymous Sudan disrupted, leaders indicted

Cybernews reports that self-proclaimed hacktivist operation Anonymous Sudan had its servers and its Distributed Cloud Attack Tool leveraged for its widespread distributed denial-of-service intrusions dismantled as part of the Operation PowerOFF effort spearheaded by the FBI, which also resulted in the apprehension and indictment of its Sudanese leaders Ahmed Salah Yousif Omer and Alaa Salah Yusuuf Omer. More […]

US, allies warn of Iranian brute-force attacks against critical infrastructure

Global critical infrastructure entities were noted by U.S., Canadian, and Australian government agencies to have been targeted with numerous brute-force attack techniques by Iranian threat actors, who later serve as initial access brokers for stolen network credentials and data, since last October, BleepingComputer reports. Iranian hackers have launched password spraying, multi-factor authentication push bombing, and other brute-force […]

Brazil apprehends prolific USDoD hacker

Widely known threat actor USDoD, who was behind the breaches of National Public Data and the FBI’s InfraGard platform, has been arrested by Brazil’s Department of Federal Police as part of its Operation Data Breach effort, according to The Record, a news site by cybersecurity firm Recorded Future. Airbus and the U.S. Environmental Protection Agency also had […]

CyberRisk TV Live Daily Intro from Oktane 2024 – Day 2 – OKT24 #2

In this daily intro video, Mandy Logan and Shaun Nichols wrap up the exhilarating highlights from Wednesday, October 16th, at Oktane, celebrating standout sessions that explored transformative identity solutions and security strategies. They then shift their focus to the exciting events planned for Thursday, October 17th, including the highly anticipated session “Driving Innovation Through Identity” […]