Hooman Minai’s Post

The quickest way to delist (stop blocking) a sender is to make them a safe sender on your own PPS instance. But you can also request that we stop blocking the IP globally. Following the steps included in this public Proofpoint Support Community article, you will create a Policy Route that disables processing for the desired IP address.

The quickest way to delist (stop blocking) a sender is to make them a safe sender on your own PPS instance. But you can also request that we stop blocking the IP globally. Following the steps included in this public Proofpoint Support Community article, you will create a Policy Route that disables processing for the desired IP address.

Protecting Your Email: How to Stay Safe

A simple addition to your Conditional Access rules to block Device Code Flow abuse - and a timely reminder to check your current Conditional Access rules for gaps or misconfigurations 😉🔐 #microsoft365 #microsoftentraid #conditionalaccess

Just when you thought you'd seen it all in the world of phishing campaigns! Mimecast's threat research team has uncovered a crafty new URL redirect trick that's giving cyber attackers a new angle. It’s mainly targeting professional, scientific, and technical services sectors. If you're in these industries, it's worth checking out the research findings and Indicators of Compromise (IOCs). Stay vigilant and informed! Dive deeper into Mimecast’s findings here: https://lnkd.in/dS25RqwM

Next up in the Principal Trusted Advisor Blog Series, a post from the one and only Jen G. - check it out to learn more about SMS MFA misses and choosing the right authentication method to be a champion! https://lnkd.in/gQj5zJuU

Email verification is a common security measure used to confirm the authenticity of a user's email address during the registration process. It typically involves sending a verification link or code to the provided email address, which the user must then click or enter to complete the registration. This process helps to ensure that the email address is valid and that the user has access to it. However, some individuals may seek to bypass this verification step for various reasons, such as gaining unauthorized access to services or creating multiple accounts without verification. Understanding how email verification bypass can occur is crucial for improving security measures and preventing potential abuse. ➡️Common Methods of Email Verification Bypass 🛡️Temporary or Disposable Email Services: Users can utilize services that provide temporary email addresses, which can be used to receive the verification email and complete the process without using their real email address. 🛡️Email Spoofing: This involves forging the email headers to make it appear as if the verification email was received and confirmed. However, this method is complex and often detectable. 🛡️Manipulating Verification Links: Some users may attempt to guess or manipulate the verification URL if the implementation has predictable patterns or lacks proper security checks. 🛡️Intercepting Verification Codes: In cases where verification codes are used, an attacker might intercept the code if they have access to the user's email account or through other means. 🔰Mitigation Strategies - ✅Using CAPTCHA: Implementing CAPTCHA during the registration process can help prevent automated bots from bypassing email verification. ✅Rate Limiting: Limiting the number of verification emails sent to a single IP address or email can reduce the effectiveness of using disposable emails. ✅Email Pattern Analysis: Monitoring for patterns associated with disposable or suspicious email addresses and blocking them can help mitigate bypass attempts. ✅Link Security: Ensuring that verification links are unique, randomized, and expire after a short period can prevent manipulation. ✅Two-Factor Authentication (2FA): Adding an additional layer of security, such as 2FA, can make it significantly harder to bypass the verification process. 🔥Learn more: https://lnkd.in/dETR7AtE #bugbounty #email #emailsecurity #emailverificationbypass #bughunting #bugbountyprogram #bugbountylearning #learningwithfireshark #firesharkacademy #firesharktechnologies

Our Microsoft Windows-installed computers are crashing because of a software problem caused by a product they outsourced from CrowdStrike. The issue, a Crowdstrike driver problem in Windows systems, is causing a bugcheck\blue screen error. This issue concerns the Falcon Sensor, a key component of CrowdStrike Falcon. The company noticed the problem in the early hours and published an announcement. "Symptoms include experiencing a bugcheck\blue screen error related to the Falcon Sensor," CrowdStrike's alert continued. "Our Engineering teams are actively working to resolve this issue, and there is no need to open a support ticket." CrowdStrike is a web/cloud-based anti-virus that uses very little storage space on your machine. The company calls this technology CrowdStrike Falcon. CrowdStrike installs a lightweight sensor on your machine that is less than 5MB and is entirely invisible to the end user, ensuring your security without intruding on your experience. The driver problem of CrowdStrike Falcon has created BSoD for Windows computers. This issue, while specifically causing Windows to crash, also has further-reaching implications. Given the prevalence of Windows as an operating system and CrowdStrike as a top-rated cybersecurity company, multiple companies and services are experiencing outages due to their computers being down. This underscores the #urgency of the situation and the need for a swift resolution. Arda Büyükkaya, a Turkish #cybersecurity expert, has provided a simple and effective ad hoc solution to the problem: Please check the codes and implement them in your responsibility. Since each system has different components, first test the codes in your systems and then use them until Crowdstrike comes up with a final solution. https://lnkd.in/d6JHRHvH https://lnkd.in/dCUymHAY

If you need a quick solution on the CrowdStrike issue, follow this link.

From using multi-factor authentication and strong passphrases to avoiding public Wi-Fi, our tips will help keep you safe online.