Your source for IT news and tech tips.
| | | Microsoft ADFS Vulnerability Lets Attackers Bypass MFA | | Dark Reading | A newly discovered vulnerability in Microsoft's Active Directory Federation Services (ADFS) lets threat actors bypass multifactor authentication (MFA) as long as they have the username and password for another person on the same ADFS service. Microsoft patched the flaw yesterday. Andrew Lee, the security engineer for Okta Research and Exploitation (REX) who discovered the bug, equates it to "turning a room key into a master key for every door in the building — but in this building, each door has a second lock that accepts a passcode." | | Microsoft Releases Patches for 60 Flaws — Two Under Active Attack | | The Hacker News | Get your update caps on. Yesterday Microsoft released its latest monthly Patch Tuesday update for August 2018, patching a total of 60 vulnerabilities, of which 19 are rated as critical. The updates patch flaws in Microsoft Windows, Edge Browser, Internet Explorer, Office, ChakraCore, .NET Framework, Exchange Server, Microsoft SQL Server, and Visual Studio. Two of these vulnerabilities patched by the tech giant are listed as publicly known and being exploited in the wild at the time of release. | | Beyond Spectre: Foreshadow, a New Intel Security Problem | | ZDNet | Spectre and Meltdown are more than a new class of security holes. They're deeply embedded in the fundamental design of recent generations of CPUs. So it shouldn't come as any surprise that yet another major Intel chip security problem has been discovered: Foreshadow. | | OneDrive Can Now Automatically Backup Your PC’s Documents, Pictures, and Desktop Folders | | The Verge | Microsoft is rolling out a new folder protection feature for OneDrive. Folder protection will offer to automatically sync your documents, pictures, and desktop folders to OneDrive to ensure a PC’s important folders are backed up to Microsoft’s cloud service. If you use multiple Windows 10 PCs then OneDrive will automatically keep all these folders in sync, which is particularly useful if you’re fond of dropping important documents onto your desktop. |
|
|
| | | Preparing for IT Budget Season | | InformationWeek | Budget time has been a struggle for IT organizations in recent years as they try to pay for maintaining existing systems, meet new challenges such as growing cybersecurity threats, and invest in digital transformation for the future. Are you ready for IT budget season? |
|
|
| | | Create Better Looking Sites More Quickly with Section Layouts in New Google Sites | | G Suite Updates | Google is adding section layouts to the new Google Sites. You can use these layouts to quickly design pages or sections of pages on your site. This makes it even easier and quicker to create professional-looking websites using the new Sites. | | Secure Corporate Data on Employee iOS Devices with Managed Apps | | G Suite Updates | To better protect the G Suite data stored on your employees’ personal iOS devices, you can now specify that certain iOS apps be “managed” if your domain has advanced mobile device management enabled. If an app is managed, you can prevent the app’s data from being backed up to iCloud, and block unmanaged apps from opening managed app files. | | Earning Trust with Atlassian’s Compliance Certifications | | Atlassian Blog | Atlassian is excited to announce the next milestone in their continued pursuit of Trust: SOC2 Type II certification for the Trust Services Criteria of security, availability, and confidentiality of Jira, Confluence, Stride, and Bitbucket (the first and only Git cloud solution with this certification), as well as ISO27001 and ISO27018 certifications for Jira and Confluence. |
|
|
|
