- Published
- Source
- Sophos
- Filed under
- Identity, Attacks
No novelty required to be effective Categories: Threat Research, X-ops, Sophos SecOps Tags: incident response…
Originally reported bySophosRead the full story on Sophos (opens in a new tab)
Share this storyLinkedIn (opens in a new tab)X (opens in a new tab)WhatsApp (opens in a new tab)Email
Protecting sign-ins
- Phishing-resistant multi-factor authentication – passkeys or security keys – for administrators first.
- Block the old sign-in methods that skip MFA, and review who can grant apps access to your data.
- Alert on impossible travel, newly added MFA methods and unusual consent grants.
More helpNCSC: multi-factor authentication for online services (opens in a new tab)
MyCyberWay training
Microsoft SC-300 exam training
Most attacks start with an identity. Learn to defend it.
Tutor-led SC-300 preparation: Microsoft Entra ID, authentication and Conditional Access, workload and application identities, and identity governance with access reviews and Privileged Identity Management.
- Entra ID and hybrid identity
- Conditional Access and authentication
- Access reviews and PIM
MyCyberWay Premium JobsEvery UK cyber security role, scored against your CV.184 UK cyber security roles in the last run · 86 at employers with a sponsor licenceExplore Premium Jobs
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
