Is Multi-factor authentication (MFA) secure enough for businesses? Recent cyberattacks on MGM, Caesars, and others suggest otherwise. Attackers are harvesting information about privileged users from LinkedIn and using vishing attacks on corporate IT helpdesks to reset MFA devices and SIM swaps. They exploit features in Identity & Access Management (IAM) for more control and exfiltrate customer data using Ransomware as a Service (RaaS) to encrypt and lock businesses. The below are the high-level events that led to the cyberattacks at MGM. 1. Analyse / Reconnaissance: Harvest info about a privileged User (Victim) from LinkedIn 2. Entry and take a Position / Weaponization: Vishing attack on corporate IT helpdesk, seek MFA device reset, SIM swapping, etc. 3. Privilege Escalation: Exploit features in Okta (inbound federation) for more control 4. Exploitation: Synchronization of credentials between on-prem and cloud resources 5. Action: Exfiltration of customer data and use of Ransomware as a Service (RaaS) to encrypt & lock for the business  Caesars reportedly paid $15 million in ransomware, while MGM suffered heavily for ten days. Okta's US customers report a pattern of attacks where hackers impersonate victim firms' employees and convince their IT helpdesk to provide them with duplicate access. Is it time for a robust Verify Your Staff (VYS) system based on Zero Trust? #cybersecurity #MFA #ZeroTrust #MGM #ransomware #cyberattacks

Zero trust is incremental, Protecting (one) attack surface at a time. Enterprises don't need to protect all surfaces simultaneously and should take an iterative approach. Planning and Investing efforts in:  ▪ Identifying Use cases  ▪ Protect Surfaces,   ▪ Choosing the right #Zerotrust Architecture and   ▪ Deployment model  is the Key to a successful adoption journey. In the second Snippet of the series of insights from my webinar on "Zero Trust Frameworks: Decoding Organisations Journey", I discussed the key factors to consider when selecting a ZTNA product. Have you ever considered these factors before selecting the ZTNA product? if not, contact us we will be here to assist you !! Checkout the quick video for insights : #networksecurity #product #organisation #identify #zero #trust #CyberSecurity #Attack #Ransomware #ztna #webinar #insights #framework

We’re excited to announce that MicroZAccess, our Zero Trust Network Access(ZTNA) product is live on Product Hunt.  As one of our valued LinkedIn connections, we would love to invite you to check it out and provide us with your valuable feedback or review. Our team at @CosgridNetworks has been working tirelessly over the past few years to develop the product and validate it with enterprise customers considering the sensitivity of the cybersecurity & IT infra space. It’s gratifying that this product would be useful for small businesses and developers as much as large enterprises with a flexible approach. For us @COSGrid, this is a first step forward towards our goal of achieving ‘Unified SASE’. Key features of MicroZAccess are :  🛡 Unparalleled Defense-in-Depth - 3X more Security. ⏫Faster access and enhanced user experience  ⏲Quick setup time and Customized Workflows  We would be thrilled if you could take a moment to check out our product and share your thoughts with us. Your feedback will help us understand what we're doing right and where we can improve to make your experience better. Please check out our Product on Product Hunt and Support:  #productlaunch #ztna #producthunt #ZeroTrust #producthuntlaunch #vpn #remoteaccess #saas #sase #support