The man was arrested this week at the Lagos airport in Nigeria. SilverTerrier arrest: Interpol, Palo Alto Networks, and Group-IB announced on Wednesday the arrest of a 37-year-old Nigerian man who was the leader of the SilverTerrier (Team TMT) BEC gang. ' Several security experts said the entire affair smells like Guccifer 2.0 and DCLeaks, two other politically-charged leaks orchestrated by Russian intelligence.

Shane Huntley, Director of the Google Threat Analysis Group, said there are 'clear technical links' between the website and a Russian group the company calls ' Cold River. Several of the victims confirmed the hack. This includes emails from ex-MI6 boss Richard Dearlove, leading Brexit campaigner Gisela Stuart, and pro-Brexit historian Robert Tombs. Very English Coop d'Etat: Reuters reported on Thursday that Russian state-sponsored hackers are behind a recently launched website named ' Very English Coop d'Etat ,' where they leaked emails of several pro-Brexit hardliners earlier this month. Kremlin decree on cybersecurity: The Russian government has ordered that all public and private organizations operating in critical sectors must have a cybersecurity team. UN sanctions on Lazarus Group: Despite a push from the US for additional economic sanctions on North Korea-including a package that would freeze assets owned by the Lazarus hacking group-China and Russia have signaled their intention to use their veto option to negate the vote on the grounds that additional sanctions would worsen the existing humanitarian crisis. Once enabled, a tenant's employees will be prompted to add an MFA solution to their accounts, and Microsoft hopes this will put a huge dent in the number of accounts that get compromised via brute-force or phishing attacks on its Azure platform. Global admins will be able to enable the security defaults on the spot or delay the process for 14 days, at which point the feature will be forcibly enabled-if they like it or not. Starting next month, Microsoft said it plans to prompt every of its old customers' Global Admins with a pop-up about the new security defaults. 'When complete, this rollout will protect an additional 60 million accounts (roughly the population of the United Kingdom!),' Weinert said. Starting with late June 2022, Weinert says that Microsoft will start forcibly enabling 'secure defaults' for the older customers as well. 'īut this will soon change, according to Alex Weinert, Director of Identity Security at Microsoft. The company said that since late 2019, more than 30 million tenants now use its secure defaults and that these companies ' experience 80 percent less compromise than the overall tenant population. Microsoft began enforcing these requirements for all new Azure AD customers in October 2019, but it did not mess with the accounts of its existing customer organizations in order to prevent outages or downtime. These ' secure defaults ,' also known as Azure AD Conditional Access, will enable multifactor authentication (MFA) for all of an organization's users and will block authentication on legacy protocols where MFA is not supported. īig news from Microsoft this week as the OS maker and cloud giant has announced plans to forcibly enable secure defaults for all Azure AD tenants next month. You can subscribe to an audio version of this newsletter as a podcast by searching for 'Risky Business News' in your podcatcher or subscribing via this RSS feed. This newsletter is brought to you by Airlock Digital, Rumble Network Discovery, Proofpoint, and Thinkst Canary.

Microsoft security defaults