Skip to content
Glock Enterprises
  • Welcome
  • Blog
  • Resources
  • Support

threat intelligence

Enterprise incident response: getting ahead of the wave

26th July 201926th July 2019 peterglock

Enterprise defenders have a tough job. In contrast to small businesses, large enterprise can have thousands of endpoints, legacy hardware from mergers and acquisitions, and legacy apps that are business […]

 Be Aware, Business, enterprise, incident response, kill chain, Malwarebytes, threat intelligence  Glock Takes Stock

Recent Posts

  • Should I be worried about MFA-bypassing pass-the-cookie attacks?
  • Cyber security labelling scheme expanded to include all smart home devices
  • 2021: The Year We Kick the Dogs Off the Internet
  • Ongoing ransomware attack leaves systems badly affected, says Scottish environment agency
  • Stolen Employee Credentials Put Leading Gaming Companies at Risk of Severe Cyber Attacks

Get in touch

Email: [email protected]


View Glock Enterprises Ltd profile on Ariba Discovery

Data Protection Register

Registered with the ICO: ZA494319

About

Glock Enterprises Ltd. Registered in England & Wales No. 11183883

VAT No: GB 361 2795 89

All content (c) Glock Enterprises Ltd 2020

Pages

  • Blog
  • Privacy Policy
  • Resources
    • Free Trial – Private Threat Intelligence
    • White Paper: Building a Business Case for Cybersecurity Asset Management
    • White Paper: Cyber Deception – Migrating to an alternative platform
    • White Paper: Hunting for Threats in Operational Technology
    • White Paper: Internet Connected Storage
    • Whitepaper: 5 Steps to Building a Threat Modelling Program for AWS
    • Whitepaper: Coping with a flood of Data Subject Access Requests
  • Services
  • Support
  • Welcome

The Latest from Facebook

Glock Enterprises Ltd

9 hours ago

Glock Enterprises Ltd
Should I be worried about MFA-bypassing pass-the-cookie attacks?TL;DR Yes. Time for a cookie review and a bit of user education otherwise the effort of moving to multi-factor authentication will have been wasted...:[...] “Thinking that MFA magically makes you unhackable is even more dangerous than not using MFA. Unfortunately, most MFA implementers and certainly most users don’t understand this. For example, I can send anyone a phishing email and get around their MFA solution and if you don’t know that, you might not pay as much attention to what URL you’re clicking on.”[...]Cerberus Sentinel’s Espinosa said: “The way to mitigate the MFA pass-the-cookie vulnerability is with better cookie management and better user training.“Specifically, cookies should be set with a short lifespan and should be for a single session, so when the browser is closed, the cookie is voided. Users should be trained to log off the web application and close their browser after they are done using the web application. Many users never logoff or close a browser – this increases risk.“The bottom line is there is no single way to fix the pass-the-cookie problem, unless you force a user to reauthenticate more frequently for different web application functionality. This diminishes the user experience though,” he said.[...]Original article buff.ly/360rdLU ... See MoreSee Less

Photo

View on Facebook
· Share

Share on Facebook Share on Twitter Share on Linked In Share by Email

Proudly powered by WordPress | Theme: Moesia by aThemes