On this week's episode, Andy and Adam talk about the security incident impacting MGM Resorts. They discuss the attack vector of social engineering and ways that you can help protect your helpdesk and users from this type of attack.
Youtube Video Link: https://youtu.be/2UvrVA7u4VA
Documentation:
https://www.vox.com/technology/2023/9/15/23875113/mgm-hack-casino-vishing-cybersecurity-ransomware
https://www.darkreading.com/application-security/okta-flaw-involved-mgm-resorts-breach-attackers-claim
https://sec.okta.com/articles/2023/08/cross-tenant-impersonation-prevention-and-detection
https://twitter.com/RachelTobac/status/1701801025940971792?s=20
https://twitter.com/Jhaddix/status/1702154228037488928?s=20
https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-authentication-temporary-access-pass
Contact Us:
Website: https://bluesecuritypod.com
Twitter: https://twitter.com/bluesecuritypod
Threads: https://www.threads.net/@bluesecuritypodcast
Linkedin: https://www.linkedin.com/company/bluesecpod
Youtube: https://www.youtube.com/c/BlueSecurityPodcast
Twitch: https://www.twitch.tv/bluesecuritypod
Andy Jaw
Mastodon: https://infosec.exchange/@ajawzero
Twitter: https://twitter.com/ajawzero
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
--- Send in a voice message: https://podcasters.spotify.com/pod/show/blue-security-podcast/message