Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
mastodon.world is one of the many independent Mastodon servers you can use to participate in the fediverse.
Generic Mastodon server for anyone to use.

Administered by:

Server stats:

12K
active users

mastodon.world: AboutStatusProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.7

#mfa

17 posts13 participants3 posts today
Public
Alo Japan

alojapan.com/1235679/mfa-sacks MFA sacks diplomat who was fined for filming naked boy at Tokyo public bath #MFA #MinistryOfForeignAffairs #Tokyo #TokyoTopics #東京 #東京都 DID NOT VOLUNTARILY INFORM MFA ABOUT INCIDENT Japanese media reported that in February last year, the diplomat had used his mobile phone to secretly film a 13-year-old first-year middle school student in the changing room of a public bath. The boy was naked. The police were called and “multiple naked photos o…

MFA sacks diplomat who was fined for filming naked boy at Tokyo public bath
Continued thread
Public
George Ellenburg (he/him/his)

I should also point out that #Webmin is not exposed to the open internet. It used to be, before I installed #Tailscale, and back then every account required #MFA, but since I've transitioned to Tailscale for my intranet for all my servers both at home and remote Webmin is now only exposed to my #Tailnet. Which means that if Tailscale doesn't come up for some reason I need to login to the server console (royal pain in the ass but still.) #sysadmin #linux

Public
LMG Security

Hackers are bypassing #MFA with new #phishing kits like SneakyLog!

Watch our 4-minute video to learn how attackers are stealing MFA codes, session tokens, and cookies using sophisticated tools sold as malware-as-a-service.

We'll share:

▪ How SneakyLog mimics login portals & detects fake traffic.
▪ How blurry login pages trick users into giving up credentials.
▪ How to defend against MFA bypass with Zero Trust, hardware tokens, SSO, and more.

As attackers pivot between platforms—it's time to strengthen your identity protections!

🎥 Watch Now: youtu.be/7Vipr_EySwI

youtu.be- YouTubeEnjoy the videos and music you love, upload original content, and share it all with friends, family, and the world on YouTube.
#Cybersecurity#MFABypass#SneakyLog
Public
Putin's IBS

#Ukraine has achieved full alignment with the #European_Union’s foreign policy and defence strategies in 2025, according to the Ministry of Foreign Affairs (#MFA) The #EU confirmed that Ukraine has met all its international obligations following the completion of legislative screening in early March. The next step in #Ukraine’s #European integration process is the opening of the “#External_Relations” negotiating cluster.

#ukraine #putinisamasskiller #putinisawarcriminal @kardinal691

Public
Christoffer S.

(sophos.com) Evilginx: How Attackers Bypass MFA Through Adversary-in-the-Middle Attacks news.sophos.com/en-us/2025/03/

A short descriptive article about Evilginx and how stealing credentials work, a few suggested ways of detecting etc.

Summary:
This article examines Evilginx, a tool that leverages the legitimate nginx web server to conduct Adversary-in-the-Middle (AitM) attacks that can bypass multifactor authentication (MFA). The tool works by proxying web traffic through malicious sites that mimic legitimate services like Microsoft 365, capturing not only usernames and passwords but also session tokens. The article demonstrates how Evilginx operates, showing how attackers can gain full access to a user's account even when protected by MFA. It provides detection methods through Azure/Microsoft 365 logs and suggests both preemptive and reactive mitigations, emphasizing the need to move toward phishing-resistant FIDO2-based authentication methods.

Sophos News · Stealing user credentials with evilginxA malevolent mutation of the widely used nginx web server facilitates Adversary-in-the-Middle action, but there’s hope
#Cybersecurity#ThreatIntel#Evilginx
Public
Habr

Что произошло в 2022 году и как будет развиваться рынок информационной безопасности в 2025 году

После ухода иностранных вендоров российский рынок информационной безопасности не только не рухнул, но и продолжил развиваться. Отечественные компании активно разрабатывают собственные решения в таких областях, как защита конечных устройств (EDR), межсетевые экраны нового поколения (NGFW), системы защиты данных и другие ключевые продукты, которые помогают укрепить инфраструктуру безопасности российских организаций. В этой статье рассказываю о том, какие компании стали лидерами в отдельных сегментах рынка ИБ и какие тренды определяют их развитие.

habr.com/ru/articles/894534/

ХабрЧто произошло в 2022 году и как будет развиваться рынок информационной безопасности в 2025 годуПосле ухода иностранных вендоров российский рынок информационной безопасности не только не рухнул, но и продолжил развиваться. Отечественные компании активно разрабатывают собственные решения в таких...
#информационная_безопасность#вендоры#антивирусная_защита
Public
13reak :fedora:

I hear very often that the cloud is secure because Multi Factor Authentication (MFA) is enabled, so all accounts are secure.

What about the service accounts and the (break glass) global administrator account?

Or in Azure: do you have a conditional access policy that excludes accounts from MFA?

What about MFA phishing with evilginx?

=> Apply a defense-in-depth strategy also in cloud environments.

#DFIR#knowledgedrop#cloud
ExploreLive feeds
About