Starting on Oct. 15, 2024, Microsoft Entra ID, Microsoft Intune, and other Microsoft Azure applications will require users to sign in with Microsoft Entra MFA. With increasing threats of account takeovers and large-scale phishing attacks targeting Entra ID users, this looks to be a step in the right direction.

Five worthy reads is a regular column on five noteworthy items we’ve discovered while researching trending and timeless topics. This week, we explore cyberattacks in the banking industry. Gone are the days when paychecks were rolled out in envelopes on payday. We’ve evolved from juggling between counters to deposit a check to managing everything through a single mobile banking application. Indeed, modern banking saves us time and encourages self-service.

Apple released its new macOS Sequoia 15.0 on Sept. 16, and we at ManageEngine are excited to announce our support from the day of its release. Before we get into the details, let’s look at which devices are eligible for the facelift. Source: Apple Sequoia was unveiled at WWDC 2024 with a range of features around privacy, security, and its much-awaited Apple Intelligence.

In part two of our blog series, The states of data, we’ll be discussing the various threats to sensitive data at rest in the form of a case study on Morgan Stanley’s data breach. Before we delve into that, let’s look at what data at rest is and see a few examples of data at rest in an organizational context.

Technology has been an integral part of the education industry, even before the onset of the pandemic. However, the shift from traditional classrooms to online courses, virtual classrooms, and digital textbooks has taken place at a rapid pace since 2020. This transition to the digital world has widened opportunities, but it has also opened avenues for cyberattacks and compliance violations.

Have you ever heard of the 80/20 rule? The 80/20 rule, also known as the Pareto principle, was named after the Italian economist Vilfredo Pareto. It states that 80% of consequences come from 20% of causes. Though only a theory, the 80/20 rule has been empirically observed in numerous facets of business.

Top tips is a weekly column where we highlight what’s trending in the tech world today and list ways to explore these trends. This week, we’re looking at four ways you can minimize your attack surface. Organizational IT infrastructure is now more spread out, multi-layered, and complex than ever.

In today’s increasingly remote work environment, IT administrators face the challenge of ensuring end users can securely and seamlessly access company resources from anywhere. A critical aspect of this is managing passwords, particularly when users are away from the domain network. These remote users greatly benefit from cached credentials, or the domain username and password hash stored locally on users’ machines after a successful domain-connected login.

The healthcare sector in the United States has seen a continuous increase in both the frequency and cost of data breaches in the past decade. This is shown by a 61% rise in HIPAA violations from 2019 to 2020, resulting in penalties totaling $13 million for the sector. From 2020 to 2023, the average cost of a single healthcare data breach in the US rose nearly 30%, reaching a whopping $9.3 million.

What do Morgan Stanley, Samsung, and a New York credit union all have in common? They aren’t of the same scale, do not cater to the same customer needs, nor do they store similar data. But, if there’s one thing in common between these three organizations, it’s that they’ve all been victims of a data leak. Morgan Stanley, the banking conglomerate, suffered a data leak due to sheer negligence of handling data at rest.

We are elated to announce that ManageEngine has again been recognized as a Challenger in the 2024 Gartner Magic Quadrant for Privileged Access Management. We believe that this is a testament to the consistency with which ManageEngine delivers a holistic experience for enterprise IT. The Gartner Magic Quadrant evaluated vendors on the basis of their Ability to Execute and their Completeness of Vision.

Firewalls act as the first line of defense, filtering network traffic and blocking malicious activities to safeguard sensitive data and systems. However, setting up a firewall is just the beginning. To ensure it provides optimal protection, it’s essential to implement certain practices for ongoing management. Firewall management involves a series of critical processes to ensure that the firewall operates effectively and provides comprehensive protection against cyberthreats.

In today’s modern networking environment, administrators in many organizations face the challenge of managing authentication for employees, especially when dealing with large staff numbers. Granting access to individual tools can be tedious for both administrators and users, as employees must log in multiple times when switching between tools and remember separate credentials for each.

A firewall rule audit is an essential process for ensuring that your firewall rules are effective and aligned with your security policies. As network environments grow more complex, managing and optimizing firewall rule bases becomes increasingly challenging. Over time, firewall rules can accumulate, leading to bloated, inefficient rule sets that hamper performance, increase security risks, and complicate compliance efforts.

The way we store data has undergone a dramatic shift. From good ol’ floppy disks to today’s cloud storage solutions, advancements in storage have slashed costs and allowed organizations to hold exponentially more data. And we are all taking advantage of this. In fact, data is proliferating at a staggering 25% annually. This presents a double-edged sword. On the one hand, this vast data lake holds immense potential for valuable insights.