CSO US First Look
The day's top cybersecurity news and in-depth coverage
October 21, 2023
Stopping the two-factor threat: configuring Microsoft Entra ID to prevent authentication breaches
Bad actors that have breached a system can adding fake devices to bypass multifactor authentication â hereâs how to stop them Read more
Most organizations globally have implemented zero trust
Zero-trust adoption is growing according to a recent report from Okta that found 61% of organizations have already implemented a zero-trust initiative. Read more
NIST provides solid guidance on software supply chain security in DevSecOps
Key recommendations from the NISTâs latest guidance and why they are relevant to modern organizations developing and delivering software. Read more
Cybercriminals register .AI domains of trusted brands for malicious activity
Third parties are registering brands under the .AI domain to launch phishing attacks or other types of brand abuse. Read more
HasMySecretLeaked finds exposed secrets in the GitHub repository
GitGuardian's new free service lets organizations check for exposed secrets from a database of 20 million records. Read more
How to respond to false breach claims
Cyber criminals will try to take advantage of unprepared organizations and claim they have infiltrated their systems when they have not. Here is how to validate and respond to false breach claims. Read more
How the US DOD Cyber Strategy changes national cyber defense
The 2023 Cyber Strategy takes a more realistic approach to the private sector's role in protecting the nation against cyber threats. Read more