This week, Adam and Andy talk about some security news relating to Microsoft. First they talk about a phishing campaign that Microsoft detailed that was going on affecting more than 10,000 orgs where the attackers are able to bypass MFA. They also talk about Microsoft's decision to roll back disabling VBA macros by default. Finally, they talk about Microsoft's DART team and how they approach ransomware and incident response.
Youtube Video Link: https://youtu.be/FJnrBMgw89g
Documentation:
https://www.microsoft.com/security/blog/2022/07/12/from-cookie-theft-to-bec-attackers-use-aitm-phishing-sites-as-entry-point-to-further-financial-fraud/
https://jeffreyappel.nl/blocking-internet-macros-in-office-and-dont-wait-for-microsoft/
https://docs.microsoft.com/en-us/security/compass/incident-response-playbook-dart-ransomware-approach
Contact Us:
Website: http://bluesecuritypod.com
Twitter: https://twitter.com/bluesecuritypod
Linkedin: https://www.linkedin.com/company/bluesecpod
Youtube: https://www.youtube.com/c/BlueSecurityPodcast
Instagram: https://www.instagram.com/bluesecuritypodcast/
Facebook: https://www.facebook.com/bluesecpod
Twitch: https://www.twitch.tv/bluesecuritypod
Andy Jaw
Twitter: https://twitter.com/ajawzero
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Send in a voice message: https://anchor.fm/blue-security-podcast/message