23andMe, Okta breach, MDE Automatic Attack Disruption

Blue Security

English - October 30, 2023 14:07 - 33 minutes - 35.4 MB - ★★★★★ - 3 ratings
Technology Homepage Download Apple Podcasts Google Podcasts Overcast Castro Pocket Casts RSS feed

Previous Episode: Entra Web-sign in, MDE Device Control, Imposter Syndrome

Next Episode: SEC charges Solarwinds CISO & Backing up and Archiving M365 data

On this week's episode, Andy and Adam talk about the 23andMe and Okta breach that happened recently along with some recommendations on how organizations can try and prevent similar attacks in the future. They also talk about a revolutionary new feature in Microsoft Defender for Endpoint called Automatic Attack Disruption. They talk about how it works and how organizations can take advantage of it even if MDE is not your incumbent or primary EDR/XDR.

-------------------------------------------

Youtube Video Link: https://youtu.be/2gUn1ZszQ-w

-------------------------------------------

Documentation:

https://techcrunch.com/2023/10/10/23andme-resets-user-passwords-after-genetic-data-posted-online/

https://www.wired.com/story/okta-support-system-breach-disclosure/

https://blog.1password.com/files/okta-incident/okta-incident-report.pdf

https://www.microsoft.com/en-us/security/blog/2023/10/11/microsoft-defender-for-endpoint-now-stops-human-operated-attacks-on-its-own/

https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/automate-the-boring-for-your-soc-with-automatic-investigation/ba-p/1381038

----------------------

Website: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://bluesecuritypod.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

Twitter: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://twitter.com/bluesecuritypod⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠