The Midnight Blizzard attack against Microsoft continues to send shockwaves across the industry. In their latest update, 6 months after the initial disclosure, Microsoft warns that the attackers who compromised employee email accounts also gained access to select customer email accounts. We continue to see email breach scenarios go undetected and uncontained for long periods of time. Protecting email as a “way in” remains a top priority, but what happens “once in”? An attacker’s ability to live off the land via a compromised email account has dangerous and lasting consequences. This ongoing incident is another reminder to consider the email attack surface from all angles, and apply protections to accounts that have access to sensitive data, systems, and apps. https://lnkd.in/e3-S_QRR
Material Security’s Post
More Relevant Posts
-
One of of Material’s power users, Aaron Clukey, Director of Information Security & IT at Alto, said it perfectly, “Material Security + FIDO2 Step-up authentication = Fort Knox Inbox” 🔐 In our latest case study interview with Aaron, we dive into how their team: ⚡ Ditched the SEG for API-based empowerment 🛡️ Seamlessly added MFA protection for sensitive financial and customer data 🧘🏻♂️ Achieved peace of mind with less dashboard fatigue Watch the full video here ➡️ https://lnkd.in/g6PFTTQA
-
🌐 While our single-tenant model is incredibly valuable, it does present some challenges when it comes to observability. Because all of our metrics are localized to customer-specific GCP instances, managing and viewing metrics across the entire fleet becomes complex. Bridget Went breaks down recent enhancements to our observability capabilities and our journey towards establishing a unified control panel for monitoring the health and performance of our service. Read the full article here ➡ https://lnkd.in/gY8m6fg7
-
-
Our customers know that email security means more than just protecting against one external threat vector. We spoke with Allen Cox, Sr. Director of IT & Security at MyFitnessPal, about which email risk areas to focus on, and how Material covers more ground than his team’s previous solution. Read the full case study here ➡️ https://lnkd.in/gQnKU9_d
-
Here’s a thought experiment – can we make email less susceptible to attacks in the first place? In this post, Ivan Dwyer makes a case for Email Security Posture Management (ESPM) to shrink the email attack surface. A well rounded email security solution means less issues coming into the SOC and more protections around accounts & data – Material customers realize these gains every day. Read the article below for a take – let us know if you agree! https://lnkd.in/ga7FWVDA
The Case for Email Security Posture Management (ESPM)
material.security
-
We sat down with Erik Wille and Tom Noll from Cabinetworks Group about their experience with Material to successfully roll out an expansive security solution for Microsoft 365 and achieving: 🌐 Greater visibility into email, account, and data insights correlated in one place ⚡ Huge efficiency gains over previous SEG solution 📡 Insightful collaboration with Material's data science team to tune threat detection & response Read the full case study here ➡️ https://lnkd.in/gmpHESkP See link to full video in comments below 👇🏻
-
Email isn’t just an attack method, it’s also an attack vector and target 🎯 Abhishek chats with Carole Theriault along with Graham Cluley at Smashing Security about why we should treat email as critical infrastructure, and how the content in your email is a target to move laterally across other accounts. Check out the full featured interview here ➡️ https://lnkd.in/gY3_uyVn
-
The ability to seamlessly and securely offboard employees is critical, and failing to do so has serious security implications. Nate Abbott breaks down how to simplify the process through Material’s latest product, Data Protection for Google Drive. Learn more here (includes video demo) ➡️ https://lnkd.in/gHMz6Qyt
-
-
GovCon Wire interviews Abhishek about how Material protects both private and public sector assets. Highlights from the conversation: 🛑 Traditional tools like email gateways won’t help stop an attack if email isn’t the attack vector but is the target 🔑 Material’s API allows customers to defend your cloud office and get a handle on data stored at-rest 👥 It’s critical to return control of data to security teams to reduce the impact of a breach Read the full interview here ➡️ https://lnkd.in/ghArGHMg
-
-
🔎 ATO attacks are notoriously difficult to detect. The presence of unsanctioned apps and services within an environment exacerbates the problem. Check our Nate Abbott's latest post on how Material’s unique approach to email and data security prevents and streamlines the response to these threats. https://lnkd.in/gQzD7H8f
-
VP of Sales @ Material
1wGlaringly obvious that #security teams need an additional layer as an insurance policy against their own MSFT cloud office environment. Trusting MSFT to secure MSFT has led us to this point.