Cyber Defense Advisors

Year: 2023

  • by
  • February 23, 2023

Okta MFA

ACM.165 Additional MFA options (like Yubikey with no seed) and enforcing MFA policies Continue reading on Cloud Security »

Cyber News, Cyber Threat Trends

Samsung Launches Message Guard to Protect Users From Cyber-Threats

The feature provides a sandbox layer isolating some image files from the rest of the device

Cyber News, Cyber Threat Trends
  • by
  • February 21, 2023

Okta Networking

ACM.163 How to limit network access and thereby limit possible attacks on our Okta User Directory Continue reading on Cloud Security »

Cyber News, Cyber Threat Trends
  • by
  • February 20, 2023

Is OWASP at Risk of Irrelevance?

A growing group of OWASP members and board leaders are calling for the AppSec group to make big changes to stay apace with modern development.

Cyber News, Cyber Threat Trends
  • by
  • February 20, 2023

EU parliamentary committee says ‘no’ to EU-US data privacy framework

Progress on ratifying the Trans-Atlantic Data Policy Framework hit a snag, as a parliamentary committee rejected a draft decision to adopt the pact, saying it did not comply with the EU’s GDPR privacy regulations.

Cyber News, Cyber Threat Trends
  • by
  • February 20, 2023

Bug Deleting AWS Identity Provider from CloudFormation

Scenario: Deleting an IDP with a dynamic Secrets Manager reference Continue reading on Bugs That Bite »

Cyber News, Cyber Threat Trends
  • by
  • February 20, 2023

Federating AWS Authentication to Okta with SAML

ACM.160 A high level walkthrough of integrating Okta with AWS Continue reading on Cloud Security »

Cyber News, Cyber Threat Trends
  • by
  • February 20, 2023

GoDaddy Discloses Multi-Year Security Breach Causing Malware Installations and Source Code Theft

Web hosting services provider GoDaddy on Friday disclosed a multi-year security breach that enabled unknown threat actors to install malware and siphon source code related to some of its services. The company attributed the campaign to a “sophisticated and organized group targeting hosting services.” GoDaddy said in December 2022, it received an unspecified number of […]

Cyber News, Cyber Threat Trends
  • by
  • February 20, 2023

Twitter Limits SMS-Based 2-Factor Authentication to Blue Subscribers Only

Twitter has announced that it’s limiting the use of SMS-based two-factor authentication (2FA) to its Blue subscribers. “While historically a popular form of 2FA, unfortunately we have seen phone-number based 2FA be used – and abused – by bad actors,” the company said. “We will no longer allow accounts to enroll in the text message/SMS method […]

Cyber News, Cyber Threat Trends