Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Microsoft’s initiative to phase out NTLM authentication in favor of the more secure Kerberos protocol was originally announced back in October 2023. At that time, the Windows maker declared its intention to deprecate NTLM and encourage organizations to transition to Kerberos for authentication purposes across its ecosystem. Microsoft announced this week that later this year they are expecting to retire NTLM authentication in Windows 11.

If you’ve been scammed, there are different actions you should take based on what you were scammed into doing. For example, if you accidentally paid a scammer, you should contact your bank immediately. If you gave a scammer your login credentials, you should update your passwords and enable MFA immediately. If a scammer hacked your device, you should run antivirus software and possibly factory reset your device.

Keeper Security is excited to announce an updated User Interface (UI) for its browser extension across all supported browsers. The refreshed UI features a modernized design, and simplifies the process of finding and creating records for users. The new browser extension updates continue the recent UI enhancements to Keeper’s end-user vault and Admin Console.

Keeper Security has once again clinched the prestigious title of “Test Winner” in a group test of leading password managers conducted by CHIP Magazine, a renowned consumer technology publication in Germany. This marks the second consecutive year Keeper has secured this esteemed recognition, following its victory in the 2023 review.

For hackers in 2024, digital assets likely look like a gold mine. Looking back at 2023, many people in the industry celebrated that there were only $1.5 billion of funds stolen due to hacks and security breaches over the course of the year (a smaller number when contrasted with 2022’s jaw-dropping $3.8 billion).

The US National Institute of Standards and Technology (NIST) has long served as the US federal government’s officially designated creator and publisher of controls frameworks for cybersecurity. The organization developed the first NIST Cybersecurity Framework (NIST CSF) in 2014.

In the rapidly changing cybersecurity landscape, Identity and Access Management (IAM) is a critical pillar, safeguarding organizational data and access across different enterprise systems and platforms. As the head of CyberArk’s Artificial Intelligence Center of Excellence (AI CoE), I’m witnessing firsthand the transformative impact of artificial intelligence (AI) in this domain.

Microsoft has recently highlighted the abuse of the remote support tool Quick Assist in sophisticated social engineering attacks leading to ransomware infections. This blog post summarizes the threat and recommends a mitigation strategy for Netskope customers.

Flask is a powerful, lightweight, and versatile web framework for Python, that's designed to make it easy for developers to develop web applications quickly with minimal boilerplate code. It's a stand-alone microframework that doesn't need any additional libraries or tools and has no database abstraction layer.

Researchers at IBM X-Force are tracking several large phishing campaigns spreading an updated version of the Grandoreiro banking trojan. The criminal malware operation was disrupted by law enforcement in January 2024 but resurfaced in March with an expanded set of targets. The new version of the malware is targeting more than 1,500 banks in over sixty countries.