Specops Software - an Outpost24 company

Our Threat Intel team, KrakenLabs, shares a threat group USDoD posted on a dark web forum on July 24th to claim they’ve got hold of a large database of threat actors compiled by CrowdStrike. Key data points from the alleged leak: - Total Listed Actors: 228 - Main Types of Actors: eCrime (Criminal), State-Sponsored, Hacktivism - Top Countries of Origin for Actors: Russian Federation, China, Iran - Most Targeted Industries: Technology, Government, Healthcare, Energy - Most Targeted Countries: United States, United Kingdom, Germany, Canada, France Read more here: https://bit.ly/3LGcIkW #cybersecurity #crowdstrike #darkweb

NIS2 is broadening its coverage and strengthening its criteria in response to the growing complexity and prevalence of cyber attacks. The NIS2 Directive prioritizes enhancing cybersecurity throughout the EU and implies the significance of implementing strong password security within an organization's overall cybersecurity strategy. Explore the implications of NIS2 for your cybersecurity measures: https://bit.ly/3zVdVCa #NIS2 #MFA #cybersecurity #passwordsecurity

Are you looking for a streamlined and secure way to onboard new users? Specops Software has introduced an efficient solution for scripting new user onboarding with Specops First Day Password feature. 🛠️ IT administrators can bulk enroll users using PowerShell, making the process seamless and secure. Whether you're handling onboarding for a large educational institution or a growing enterprise, this tool is designed to simplify your workflow. Key Features: • Bulk user enrollment via CSV file integration. • Flexible authentication options using personal email or mobile. • Set specific start dates and password validity periods. Read more to learn how to configure the initial password to new employees for remote onboarding: https://bit.ly/3z8Cqex #ITSecurity #UserOnboarding #ActiveDirectory #PowerShell #SpecopsSoftware #TechNews #CyberSecurity

🚨 IT Service Desks: A Prime Target for Cyber Threats 🚨 The role of IT service desks is more crucial than ever. They handle everything from password resets to software issues, but this also makes them a hotspot for cyber-attacks. Recent incidents at companies like EA Games and MGM Resorts highlight the vulnerability of service desks to social engineering tactics, where even a simple phone call can lead to massive data breaches. BleepingComputer shares best practices to secure your service desk: 👩💻 Regular Cybersecurity Training: Keep your team updated on the latest threats and preventive techniques. 🔃 Automate Password Resets: Reduce human error and security risks by automating password management. 🤳Enhanced User Verification: Implement robust verification processes to ensure that the person on the other end is who they claim to be. Investing in comprehensive training, advanced verification methods, and automation can significantly fortify your service desk against cyber threats. Let's prioritize the security of our first line of defense! Read more about how to protect your IT service desk here: https://bit.ly/3KJ4NTa #Cybersecurity #socialengineering #helpdesk #servicedesk

The faulty update from CrowdStrike today caused widespread disruptions, displaying the dreaded 'Blue Screen of Death' and preventing PCs from booting up. "This is similar to a supply chain attack. If an attacker had backdoored such an update to open systems to attacks or to encrypt them, the exact same systems would have been impacted. This is why supply chain attacks and defence has been increasingly important." - Martin Jartelius, Chief Security Officer at Outpost24. Although Outpost24 is unimpacted by this incident, our team is dedicated to helping customers with detection. It’s a long weekend for IT security teams and we have their backs. “This incident serves as a crucial reminder of the importance of the robustness of our security and availability, which hinge on the reliability of our service providers,” said Martin. For more information on the outage, read here: https://lnkd.in/eCubVD47 #cybersecurity #crowdstrike

Lateral movement attacks are particularly insidious because they allow attackers to stealthily gather information, escalate access, and potentially cause significant damage. BleepingComputer shares to defend against these threats, it’s essential for organizations to: 🔒 Implement robust password policies. 📱Encourage the use of multi-factor authentication. 🔃 Regularly update and patch systems to close off vulnerabilities. 👨💻 Conduct regular security training to help employees recognize and avoid phishing attempts and other social engineering tactics. 🔍 Monitor network traffic and employ intrusion detection systems to spot and respond to suspicious activities. ↔️ Use network segmentation to limit how far an attacker can move laterally within the network. Understanding and implementing these measures can be the difference between a secure network and a costly data breach. To learn more, read: https://bit.ly/3XjAGJC #cybersecurity #passwords #cyberattacks #CredentialSecurity #NetworkSecurity

Navigating the complexities of remote onboarding? Specops Software recently unveiled a game-changer: the Specops First Day Password (FDP) feature. This innovative solution streamlines the initial password setup for new hires, enhancing security and user experience from day one. 🛠️ Deployment & Integration FDP supports various deployment scenarios, whether it's pre-configuring user profiles or integrating with Microsoft Autopilot/Intune for seamless software deployment post-password setup. Read more to learn how to configure the initial password to new employees for remote onboarding: https://bit.ly/3z7V9Ha #Cybersecurity #passwords #newhire #password security

Our research team found 157,048 sporting passwords that have been stolen by malware over the past 12 months. “You might not think many people would use their favorite sport as a password, but this data shows they do. Most end users know they shouldn’t use their birthdays, children’s names, or even pet’s names as passwords – because it’s easy for hackers to find that information. However, they’ll still often reach for something familiar and memorable. Using a favorite hobby, film, or musician as your password carries risk too.” Darren James, Senior Product Manager at Specops Software - an Outpost24 company It’s also common for end users to reuse their passwords, so there’s a high chance these compromised passwords are being used across multiple applications. See the latest research on the most common Olympic sports referenced in stolen passwords and learn just how you can prevent users from using these in Active Directory: https://lnkd.in/e_DBEa97 #passwordsecurity #cybersecurity #activedirectory #malware #olympicsports

Summer vacations are upon us and during this time of year, a recent analysis shows end-users forget passwords more than usual. Even with employees out, organizations still have to handle password resets with their IT-helpdesks. Join our webinar tomorrow with Darren Siegel, as he dives into the stats and real costs around password resets. You will see a solution how organizations saved on average $65,000 on password resets alone in 2023! 📅 Date: July 16, 2024 ⏰ Time: 10:00am EST | 1600 CET ⏳ Duration: 30-45 minutes Save your seat: https://bit.ly/3XND1N6 #cybersecurity #passwords #SSPR #activedirectory

Claims that 10 billion passwords pop up on the dark web 'RockYou2024' release. - But is it just as a clickbait compilation? “The dataset is too large to be of any realistic use as part of any effort to crack a given hash — it's simply too much low-quality data to successfully use in attacks — and the value of the data is negligible compared to good prepared wordlists and rulesets in the hands of a capable actor," says Darren James, Senior Product Manager at Specops Software - an Outpost24 company.    Read more on Dark Reading: https://lnkd.in/ez9jDu3R   #passwordsecurity #breachedpasswords #cybersecurity