#accountsecurity — Public Fediverse posts

OpenAI launches Advanced Account Security with YubiKey support to lock down ChatGPT accounts

https://fed.brid.gy/r/https://nerds.xyz/2026/05/openai-advanced-account-security-chatgpt/

OpenAI launches Advanced Account Security with YubiKey support to lock down ChatGPT accounts

https://fed.brid.gy/r/https://nerds.xyz/2026/05/openai-advanced-account-security-chatgpt/

MICROSOFT, GOOGLE, AND THE EVER-SHIFTING DIGITAL LANDSCAPE

Users report Microsoft accessing Google accounts. Google's default search tips appear on Bing, showing tech giant competition. Find out what's happening.

#Microsoft, #Google, #TechNews, #AccountSecurity, #SearchEngine

https://newsletter.tf/microsoft-google-account-access-search-default-bing/

Reports show Microsoft accessing Google accounts, while Google's instructions to set it as the default search engine are appearing on Bing. This highlights the ongoing competition between the tech giants.

#Microsoft, #Google, #TechNews, #AccountSecurity, #SearchEngine
https://newsletter.tf/microsoft-google-account-access-search-default-bing/

Getting stuck in an infinite “please try again” loop while creating a Microsoft account.
It surely does a decent job blocking batch registrations too, right?

#Microsoft #AccountSecurity #SpamPrevention #BotDetection #Tech

Locked Out of Your Facebook Account? Here’s How to Recover It

At BTDesigns, we work with business owners, creators, and organizations every week who suddenly lose access to their Facebook accounts — often at the worst possible time. Whether it’s due to hacking, a policy violation, or a verification issue, there are steps you can take to recover your account.

Here are practical ways to recover your Facebook account 👇

⸻

1. Start with Facebook’s Official Recovery Tools

If you’ve lost access, head to Facebook’s account recovery flow:

• Use “Forgot Password” on the login screen

• Visit facebook.com/hacked if your account was compromised

• Follow the identity verification steps carefully

📌 Tip: Use the same device and location you’ve logged in from before — this improves success rates.

⸻

2. Secure Your Email First

Your Facebook recovery depends heavily on email access.

• Regain access to the email tied to your Facebook account

• Check spam and “All Mail” folders for Facebook messages

• Update your email password immediately if you suspect hacking

⸻

3. Complete Identity Verification (Yes, It’s Worth It)

If Facebook asks for ID verification:

• Upload a clear, unedited photo of your ID

• Make sure your name matches your Facebook profile

• Be patient — responses can take several days

⸻

4. Check for Policy or Ad Account Issues

Business accounts are often disabled due to:

• Ad policy violations

• Unusual login activity

• Linked business pages or ad accounts flagged

Visit Meta Business Support and submit an appeal if applicable.

⸻

5. Avoid Common Recovery Mistakes

❌ Submitting multiple appeals at once

❌ Using different emails during recovery

❌ Logging in repeatedly from new devices

❌ Falling for “account recovery services” or scams

⸻

6. Prevent This from Happening Again

Once you’re back in:

• Turn on Two-Factor Authentication

• Add a backup admin to business pages

• Separate personal and business ad accounts

• Review app and user permissions

⸻

Need Help Navigating This?

Recovering a Facebook account can be frustrating — especially when your business depends on it. At BTDesigns, we help clients secure, recover, and future-proof their digital presence so they can stay focused on growth.

Follow DoRaleigh.com for daily updates on government meetings, local festivals, and community happenings — your one-stop guide to everything Raleigh!

Post your community News, Events, and you can request placing a Paid ad on our Submissions Page.

Follow Us: Instagram | Facebook | BSky | Linkedin

#AccountSecurity #BusinessGrowth #DigitalPresence #BTDesigns #CyberSecurity #DigitalMarketing #FacebookRecovery #GetHelpUsingYourTechnology #MetaBusiness #News #raleigh #SmallBusinessSupport #SocialMediaTips #TechTips

🚨 Microsoft, Apple, Google and Amazon accounts are increasingly targeted by credential theft and large-scale phishing campaigns. Attackers are exploiting reused passwords and fake login pages to break into major tech accounts — which can then be used to reset other services, steal data, or commit fraud. Enable MFA, use unique passwords, and double-check unexpected login alerts to stay safe.
👉 https://digital-escape-tools-phi.vercel.app/2026/01/news16.html

#CyberSecurity #Phishing #AccountSecurity #MFA #DataProtection

NordVPN research shows thousands of airline & hotel loyalty accounts being sold on dark web forums - some for under $1.

Stolen miles, credential stuffing, and weak account security remain a major issue for travelers.

Details: https://www.technadu.com/airline-hotel-loyalty-accounts-exposed-on-dark-web-by-nordvpn/616368/

#Infosec #DarkWeb #AccountSecurity

🚨 URGENT ALERT — New PayPal Scam Wave Is Spreading 🛡️

Cybercriminals are using highly realistic PayPal-themed scams to steal login credentials, 2FA codes, and even bank information.
These attacks are now appearing via email, SMS, phone calls, AND fake login pages.

The goal?
➡ Create panic.
➡ Make you click fast.
➡ Capture your identity & money.

⸻

🔎 What the Scam Looks Like

You may see messages like:

“Your account has been limited — verify now”
“Suspicious transaction detected — view invoice”
“Refund pending — login to confirm details”

These often link to fake PayPal pages designed to harvest credentials.
Some cases even include fake customer support phone numbers — leading to social engineering calls.

⸻

⚠️ Major Red Flags to Watch For:

🚩 Strange sender address (not @paypal.com)
🚩 Grammar/spelling mistakes
🚩 Links that don’t go to paypal.com
🚩 Requests for full password or 2FA code
🚩 Page doesn’t load when you manually type paypal.com

Reminder: Real PayPal will NEVER ask for your password or security code via email or SMS.

⸻

🛡️ If You Receive a Suspicious Message

✔ Do NOT click any links
✔ Open a browser & type paypal.com yourself
✔ Check your recent activity directly
✔ Enable / reset 2FA & change your password
✔ Remove any suspicious linked cards/banks
✔ Report emails to: [email protected]
✔ Contact your bank if money was moved

⸻

🔐 Prevention Steps

✔ Use a unique, strong password
✔ Enable multi-factor authentication
✔ Keep your devices updated
✔ Use official app — avoid random links
✔ Never trust “urgent” calls claiming to be PayPal
✔ Treat every login page as a security check

⸻

🧠 Most Common Scam Variants Right Now

⚙ Fake “account suspension” warnings
📨 Invoice phishing scams
📞 Phone-based support scams (TOAD)
🌐 Fake login portals / cloned pages
🔒 Credential stuffing from old data breaches

⸻

Spread awareness — this is actively circulating.
One share could protect someone’s money and identity.

👇 Let’s talk:
Which red flag do YOU think is easiest to miss?

#infosec #scams #paypalScam #PayPalScam
#ScamAlert
#FraudPrevention
#PhishingWarning
#IdentityTheft
#AccountSecurity
#StopScammers
#OnlineScams
#CyberFraud

For educational & defensive purposes only.

No personal accounts can be investigated — always contact PayPal directly for help.

🚨 URGENT ALERT — New PayPal Scam Wave Is Spreading 🛡️

Cybercriminals are using highly realistic PayPal-themed scams to steal login credentials, 2FA codes, and even bank information.
These attacks are now appearing via email, SMS, phone calls, AND fake login pages.

The goal?
➡ Create panic.
➡ Make you click fast.
➡ Capture your identity & money.

⸻

🔎 What the Scam Looks Like

You may see messages like:

“Your account has been limited — verify now”
“Suspicious transaction detected — view invoice”
“Refund pending — login to confirm details”

These often link to fake PayPal pages designed to harvest credentials.
Some cases even include fake customer support phone numbers — leading to social engineering calls.

⸻

⚠️ Major Red Flags to Watch For:

🚩 Strange sender address (not @paypal.com)
🚩 Grammar/spelling mistakes
🚩 Links that don’t go to paypal.com
🚩 Requests for full password or 2FA code
🚩 Page doesn’t load when you manually type paypal.com

Reminder: Real PayPal will NEVER ask for your password or security code via email or SMS.

⸻

🛡️ If You Receive a Suspicious Message

✔ Do NOT click any links
✔ Open a browser & type paypal.com yourself
✔ Check your recent activity directly
✔ Enable / reset 2FA & change your password
✔ Remove any suspicious linked cards/banks
✔ Report emails to: [email protected]
✔ Contact your bank if money was moved

⸻

🔐 Prevention Steps

✔ Use a unique, strong password
✔ Enable multi-factor authentication
✔ Keep your devices updated
✔ Use official app — avoid random links
✔ Never trust “urgent” calls claiming to be PayPal
✔ Treat every login page as a security check

⸻

🧠 Most Common Scam Variants Right Now

⚙ Fake “account suspension” warnings
📨 Invoice phishing scams
📞 Phone-based support scams (TOAD)
🌐 Fake login portals / cloned pages
🔒 Credential stuffing from old data breaches

⸻

Spread awareness — this is actively circulating.
One share could protect someone’s money and identity.

👇 Let’s talk:
Which red flag do YOU think is easiest to miss?

#infosec #scams #paypalScam #PayPalScam
#ScamAlert
#FraudPrevention
#PhishingWarning
#IdentityTheft
#AccountSecurity
#StopScammers
#OnlineScams
#CyberFraud

For educational & defensive purposes only.

No personal accounts can be investigated — always contact PayPal directly for help.

🚨 URGENT ALERT — New PayPal Scam Wave Is Spreading 🛡️

Cybercriminals are using highly realistic PayPal-themed scams to steal login credentials, 2FA codes, and even bank information.
These attacks are now appearing via email, SMS, phone calls, AND fake login pages.

The goal?
➡ Create panic.
➡ Make you click fast.
➡ Capture your identity & money.

⸻

🔎 What the Scam Looks Like

You may see messages like:

“Your account has been limited — verify now”
“Suspicious transaction detected — view invoice”
“Refund pending — login to confirm details”

These often link to fake PayPal pages designed to harvest credentials.
Some cases even include fake customer support phone numbers — leading to social engineering calls.

⸻

⚠️ Major Red Flags to Watch For:

🚩 Strange sender address (not @paypal.com)
🚩 Grammar/spelling mistakes
🚩 Links that don’t go to paypal.com
🚩 Requests for full password or 2FA code
🚩 Page doesn’t load when you manually type paypal.com

Reminder: Real PayPal will NEVER ask for your password or security code via email or SMS.

⸻

🛡️ If You Receive a Suspicious Message

✔ Do NOT click any links
✔ Open a browser & type paypal.com yourself
✔ Check your recent activity directly
✔ Enable / reset 2FA & change your password
✔ Remove any suspicious linked cards/banks
✔ Report emails to: [email protected]
✔ Contact your bank if money was moved

⸻

🔐 Prevention Steps

✔ Use a unique, strong password
✔ Enable multi-factor authentication
✔ Keep your devices updated
✔ Use official app — avoid random links
✔ Never trust “urgent” calls claiming to be PayPal
✔ Treat every login page as a security check

⸻

🧠 Most Common Scam Variants Right Now

⚙ Fake “account suspension” warnings
📨 Invoice phishing scams
📞 Phone-based support scams (TOAD)
🌐 Fake login portals / cloned pages
🔒 Credential stuffing from old data breaches

⸻

Spread awareness — this is actively circulating.
One share could protect someone’s money and identity.

👇 Let’s talk:
Which red flag do YOU think is easiest to miss?

#infosec #scams #paypalScam #PayPalScam
#ScamAlert
#FraudPrevention
#PhishingWarning
#IdentityTheft
#AccountSecurity
#StopScammers
#OnlineScams
#CyberFraud

For educational & defensive purposes only.

No personal accounts can be investigated — always contact PayPal directly for help.

🚨 URGENT ALERT — New PayPal Scam Wave Is Spreading 🛡️

Cybercriminals are using highly realistic PayPal-themed scams to steal login credentials, 2FA codes, and even bank information.
These attacks are now appearing via email, SMS, phone calls, AND fake login pages.

The goal?
➡ Create panic.
➡ Make you click fast.
➡ Capture your identity & money.

⸻

🔎 What the Scam Looks Like

You may see messages like:

“Your account has been limited — verify now”
“Suspicious transaction detected — view invoice”
“Refund pending — login to confirm details”

These often link to fake PayPal pages designed to harvest credentials.
Some cases even include fake customer support phone numbers — leading to social engineering calls.

⸻

⚠️ Major Red Flags to Watch For:

🚩 Strange sender address (not @paypal.com)
🚩 Grammar/spelling mistakes
🚩 Links that don’t go to paypal.com
🚩 Requests for full password or 2FA code
🚩 Page doesn’t load when you manually type paypal.com

Reminder: Real PayPal will NEVER ask for your password or security code via email or SMS.

⸻

🛡️ If You Receive a Suspicious Message

✔ Do NOT click any links
✔ Open a browser & type paypal.com yourself
✔ Check your recent activity directly
✔ Enable / reset 2FA & change your password
✔ Remove any suspicious linked cards/banks
✔ Report emails to: [email protected]
✔ Contact your bank if money was moved

⸻

🔐 Prevention Steps

✔ Use a unique, strong password
✔ Enable multi-factor authentication
✔ Keep your devices updated
✔ Use official app — avoid random links
✔ Never trust “urgent” calls claiming to be PayPal
✔ Treat every login page as a security check

⸻

🧠 Most Common Scam Variants Right Now

⚙ Fake “account suspension” warnings
📨 Invoice phishing scams
📞 Phone-based support scams (TOAD)
🌐 Fake login portals / cloned pages
🔒 Credential stuffing from old data breaches

⸻

Spread awareness — this is actively circulating.
One share could protect someone’s money and identity.

👇 Let’s talk:
Which red flag do YOU think is easiest to miss?

#infosec #scams #paypalScam #PayPalScam
#ScamAlert
#FraudPrevention
#PhishingWarning
#IdentityTheft
#AccountSecurity
#StopScammers
#OnlineScams
#CyberFraud

For educational & defensive purposes only.

No personal accounts can be investigated — always contact PayPal directly for help.

X users, time is ticking—re-enroll your 2FA keys by November 10, 2025, or risk getting locked out. Find out how this move is set to tackle rising cyber threats and secure your account for the future!

https://thedefendopsdiaries.com/mandatory-2fa-security-key-re-enrollment-for-x-users-by-november-10-2025-what-you-need-to-know/

#2fa
#securitykeys
#accountsecurity
#phishingprotection
#cybersecurity2025

Google Issues Warning to Certain Users After Leaked Data Hack — Here’s Who’s Affected

NEED TO KNOW Certain Google users’ data may be at risk after a recent breach Hackers attacked the…
#NewsBeep #News #US #USA #UnitedStates #UnitedStatesOfAmerica #Technology #accountsecurity #customerdata #Google #GoogleAccount #GoogleCloud
https://www.newsbeep.com/us/122498/

Google Issues Warning to Certain Users After Leaked Data Hack — Here’s Who’s Affected

NEED TO KNOW Certain Google users’ data may be at risk after a recent breach Hackers attacked the…
#NewsBeep #News #US #USA #UnitedStates #UnitedStatesOfAmerica #Technology #accountsecurity #customerdata #Google #GoogleAccount #GoogleCloud
https://www.newsbeep.com/us/122498/

Google Issues Warning to Certain Users After Leaked Data Hack — Here’s Who’s Affected

NEED TO KNOW Certain Google users’ data may be at risk after a recent breach Hackers attacked the…
#NewsBeep #News #US #USA #UnitedStates #UnitedStatesOfAmerica #Technology #accountsecurity #customerdata #Google #GoogleAccount #GoogleCloud
https://www.newsbeep.com/us/121788/

Google Issues Warning to Certain Users After Leaked Data Hack — Here’s Who’s Affected

NEED TO KNOW Certain Google users’ data may be at risk after a recent breach Hackers attacked the…
#NewsBeep #News #US #USA #UnitedStates #UnitedStatesOfAmerica #Technology #accountsecurity #customerdata #Google #GoogleAccount #GoogleCloud
https://www.newsbeep.com/us/121788/

⚠️ Cybersecurity Reality of the Day

Meme says it all:

You log in = every lock known to man.
Attacker login = “Might be suspicious. Maybe.”

It’s time to move from device trust to behavior-based threat modeling.
Not all MFAs are created equal.

#InfosecLeadership #AccountSecurity #MFA #SOCOperations

⚠️ Cybersecurity Reality of the Day

Meme says it all:

You log in = every lock known to man.
Attacker login = “Might be suspicious. Maybe.”

It’s time to move from device trust to behavior-based threat modeling.
Not all MFAs are created equal.

#InfosecLeadership #AccountSecurity #MFA #SOCOperations

Upbit urges enhanced security measures for SKT users following potential SIM information leak, recommending account lock service and immediate reporting of suspicious activities.
#YonhapInfomax #Upbit #SKTelecom #SIMInformationLeak #AccountSecurity #DigitalAssetExchange #Economics #FinancialMarkets #Banking #Securities #Bonds #StockMarket
https://en.infomaxai.com/news/articleView.html?idxno=60793

Upbit urges enhanced security measures for SKT users following potential SIM information leak, recommending account lock service and immediate reporting of suspicious activities.
#YonhapInfomax #Upbit #SKTelecom #SIMInformationLeak #AccountSecurity #DigitalAssetExchange #Economics #FinancialMarkets #Banking #Securities #Bonds #StockMarket
https://en.infomaxai.com/news/articleView.html?idxno=60793

Upbit urges enhanced security measures for SKT users following potential SIM information leak, recommending account lock service and immediate reporting of suspicious activities.
#YonhapInfomax #Upbit #SKTelecom #SIMInformationLeak #AccountSecurity #DigitalAssetExchange #Economics #FinancialMarkets #Banking #Securities #Bonds #StockMarket
https://en.infomaxai.com/news/articleView.html?idxno=60793

Upbit urges enhanced security measures for SKT users following potential SIM information leak, recommending account lock service and immediate reporting of suspicious activities.
#YonhapInfomax #Upbit #SKTelecom #SIMInformationLeak #AccountSecurity #DigitalAssetExchange #Economics #FinancialMarkets #Banking #Securities #Bonds #StockMarket
https://en.infomaxai.com/news/articleView.html?idxno=60793

Upbit urges enhanced security measures for SKT users following potential SIM information leak, recommending account lock service and immediate reporting of suspicious activities.
#YonhapInfomax #Upbit #SKTelecom #SIMInformationLeak #AccountSecurity #DigitalAssetExchange #Economics #FinancialMarkets #Banking #Securities #Bonds #StockMarket
https://en.infomaxai.com/news/articleView.html?idxno=60793

Tengan mucho cuidado con lo que comparten en redes sociales. #SocialMedia #AccountSecurity #AccessControl #Security #Seguridad #Privacy #Privacidad #Cibersecurity #Ciberseguridad

I wonder if #Microsoft will ever get around to implimenting regional or ASN blocks for their accounts? 🤔

#Hacking #AccountSecurity #Microsoft

Snowflake admins can now enforce MFA across all user accounts

https://stackdiary.com/snowflake-admins-can-now-enforce-mfa-across-all-user-accounts/

#Cybersecurity #DataProtection #MFA #Snowflake #SecurityMeasures #DataBreach #Authentication #CloudSecurity #TechNews #InfoSec #DigitalSafety #ITSecurity #CredentialCompromise #SecurityPolicy #DataSafety #SecureAccounts #CloudComputing #CyberThreats #TechUpdate #PrivacyProtection #UserSecurity #DataIntegrity #AccountSecurity #OnlineSafety #SecurityUpdate #TechSecurity #DataDefense #UserProtection #CloudTech

Password generator on FosseryWeb can now generate up to 128 characters long passwords instead of 64!

https://fosseryweb.codeberg.page/password-generator.html

#Password #PasswordGenerator #Security #AccountSecurity #OnlineAccounts #FosseryWeb #FosseryTech

Snowflake admins can now enforce MFA across all user accounts

https://stackdiary.com/snowflake-admins-can-now-enforce-mfa-across-all-user-accounts/

#Cybersecurity #DataProtection #MFA #Snowflake #SecurityMeasures #DataBreach #Authentication #CloudSecurity #TechNews #InfoSec #DigitalSafety #ITSecurity #CredentialCompromise #SecurityPolicy #DataSafety #SecureAccounts #CloudComputing #CyberThreats #TechUpdate #PrivacyProtection #UserSecurity #DataIntegrity #AccountSecurity #OnlineSafety #SecurityUpdate #TechSecurity #DataDefense #UserProtection #CloudTech

Apple debuts new feature to frustrate iPhone thieves

https://www.helpnetsecurity.com/2024/01/23/iphone-stolen-device-protection/

#iPhone #DeviceSecurity #AccountSecurity #Cybersecurity

Active Directory and External Email Accounts

https://security.stackexchange.com/questions/267543/active-directory-and-external-email-accounts

#accountsecurity #activedirectory #usermanagement #exchange #email

Account creation flow for semi-internal applications

https://security.stackexchange.com/questions/267182/account-creation-flow-for-semi-internal-applications

#accountsecurity #usermanagement

Binance enforces stricter measures against account misuse - The platform encourages users to report any suspected incidents of misus... - https://cointelegraph.com/news/binance-new-security-measures-account-misuse #cryptocurrencyexchange #blockchainsecurity #platformintegrity #accountsuspension #misuseprevention #accountsecurity #fraudprevention #fairmarket #kycpolicy #binance

Hello everyone.
In today's article, we examine Social Media Security in detail.

I wish everyone a good read:
https://denizhalil.com/2023/07/24/social-media-security-tips/

#socialmedia #accountsecurity #privacysecurity #malwareprevention #onlinesecurity #phishingattacks #cybersecurity

Question for my fellow iOS users: Have you switched over from using the 6-digit codes to using security keys & Advanced Data Protection on your account? Just did so myself, & hoping it improves my account security. #AccountSecurity #2FA #Apple #iOS #AdvancedDataProtection #Security #Privacy #Poll

AI-Powered Actions Cybersecurity Leaders Are Taking to Outwit Bad Actors – Source: securityboulevard.com https://ciso2ciso.com/ai-powered-actions-cybersecurity-leaders-are-taking-to-outwit-bad-actors-source-securityboulevard-com/ #rssfeedpostgeneratorecho #SecurityBloggersNetwork #CyberSecurityNews #SecurityBoulevard #accountsecurity #botdetection #AI

It's somewhat disheartening to see how many websites still have issues with complex passwords, impose ridiculous limits on password lengths, and/or the passwords containing "special characters"! 😑

I use https://password.oppetmoln.se for almost all my "random password" needs, set the length to at least 64 characters, and then let a password manager handle the rest.

👇

#cybersec #infosec #cybersecurity #password #security #AccountSecurity

It's the year 2024 .... and #Regus has updated the login system with enforcing #2FA. That's great!

But they offer only e-mail and SMS .... in the year 2024. Well, okay, you can tie your login to Microsoft and Google. But that's a completely different can of worms.

I mean ... is it that hard to implement #TOTP ??!??!

#login #privacy #security #accountsecurity

Meta To Use Facial Recognition For Recovering Compromised Accounts https://cybersecuritynews.com/meta-facial-recognition-for-account-recovery/ #CyberSecurityNews #cybersecuritynews #FacialRecognition #AccountSecurity #PrivacyConcerns #CyberSecurity #Facebook #Privacy

Want to make sure your oslo.town account is more secure? Then you can enable 2FA in the settings so that anyone logging in to your account will have to type in a unique code too. 🔐

https://oslo.town/settings/two_factor_authentication_methods

#2FA #MastoTips #Security #AccountSecurity #allheimen

🚨 Mastodon Vulnerability Patched! CVE-2024-25618 🛡️

A security flaw - CVE-2024-25618 - was fixed, in Mastodon's software to prevent potential account takeovers. This vulnerability allowed attackers to bypass authentication mechanisms via a crafted request, posing a significant risk to the platform's integrity.

It enabled new logins from certain authentication providers (like CAS, SAML, OIDC) to merge with existing local accounts sharing the same email. This could lead to someone taking over your account if the provider allows changing emails or if there are multiple providers set up.

Here's how it works: When someone logs in using an external provider for the first time, Mastodon checks for an existing account with the same email. However, relying only on the email could result in hijacking your Mastodon account if the provider allows changing it. The Mastodon team swiftly deployed a patch, reinforcing the security of user accounts and the broader ecosystem. Remember, keeping software up-to-date is crucial for safeguarding against such vulnerabilities. 🔄🔐

The commit "b31af34c9716338e4a32a62cc812d1ca59e88d15" signifies this update. For further details, check out their advisory.

A big thanks to the discoverers Dominik George and Pingu from Teckids, and the Mastodon team for their rapid response in improving our digital defenses. Stay secure, everyone! ✨🐘

Tags: #CVE2024_25618 #Mastodon #Cybersecurity #PatchUpdate #AccountSecurity #AuthenticationBypass #DigitalDefense #CommunityVigilance 🌍🔒

MITRE CVE-2024-25618 Summary

This evening I received a request in the Microsoft Authenticator app to approve a new sign-in attempt to my Microsoft account. Except, I was in the kitchen cleaning up after dinner with my wife. I wasn’t using any electronic devices at all. Here’s what happened next…

I denied the sign-in request, and then spent a couple of minutes finishing in the kitchen.

Then I went to my home office and logged in to my Microsoft account. As you’ve just learned, this requires 2-Factor Authentication (2FA), which I provided.

I changed my Microsoft account password.

Next, out of curiosity, I looked at account sign-in activity. Holy mother of little fishies in the deep blue sea! There were sign-in attempts from Sint Maarten, Italy, and Brazil, plus multiple attempts from the United States and the United Kingdom – all in just 72 hours! See the attached screenshot.

THE LESSON
It’s not just me. It’s you, too. This is going on all the time, every day, to just about everyone. That’s why you must have a strong password on your Microsoft account, and use 2FA. Watch those suspicious sign-in requests. If you don’t recognize it, deny it.

#callmeifyouneedme #fifonetworks

#cybersecurity #accountsecurity

Why is it a bad idea to accept passwords one character at a time for an authentication mechanism?

https://security.stackexchange.com/questions/269240/why-is-it-a-bad-idea-to-accept-passwords-one-character-at-a-time-for-an-authenti

#accountsecurity #authentication #passwords

Tracking someones location from social media messages

https://security.stackexchange.com/questions/269193/tracking-someones-location-from-social-media-messages

#accountsecurity #ip

Weird. The cyber security lady on the phone to my mum about her Gmail account hung up when I wanted to chat about cyber security stuff and account security. How rude.

#infosec #scamcalls #accountsecurity

Snowflake admins can now enforce MFA across all user accounts

https://stackdiary.com/snowflake-admins-can-now-enforce-mfa-across-all-user-accounts/

#Cybersecurity #DataProtection #MFA #Snowflake #SecurityMeasures #DataBreach #Authentication #CloudSecurity #TechNews #InfoSec #DigitalSafety #ITSecurity #CredentialCompromise #SecurityPolicy #DataSafety #SecureAccounts #CloudComputing #CyberThreats #TechUpdate #PrivacyProtection #UserSecurity #DataIntegrity #AccountSecurity #OnlineSafety #SecurityUpdate #TechSecurity #DataDefense #UserProtection #CloudTech

Snowflake admins can now enforce MFA across all user accounts

https://stackdiary.com/snowflake-admins-can-now-enforce-mfa-across-all-user-accounts/

#Cybersecurity #DataProtection #MFA #Snowflake #SecurityMeasures #DataBreach #Authentication #CloudSecurity #TechNews #InfoSec #DigitalSafety #ITSecurity #CredentialCompromise #SecurityPolicy #DataSafety #SecureAccounts #CloudComputing #CyberThreats #TechUpdate #PrivacyProtection #UserSecurity #DataIntegrity #AccountSecurity #OnlineSafety #SecurityUpdate #TechSecurity #DataDefense #UserProtection #CloudTech

Snowflake admins can now enforce MFA across all user accounts

https://stackdiary.com/snowflake-admins-can-now-enforce-mfa-across-all-user-accounts/

#Cybersecurity #DataProtection #MFA #Snowflake #SecurityMeasures #DataBreach #Authentication #CloudSecurity #TechNews #InfoSec #DigitalSafety #ITSecurity #CredentialCompromise #SecurityPolicy #DataSafety #SecureAccounts #CloudComputing #CyberThreats #TechUpdate #PrivacyProtection #UserSecurity #DataIntegrity #AccountSecurity #OnlineSafety #SecurityUpdate #TechSecurity #DataDefense #UserProtection #CloudTech

Hello everyone.
In today's article, we examine Social Media Security in detail.

I wish everyone a good read:
https://denizhalil.com/2023/07/24/social-media-security-tips/

#socialmedia #accountsecurity #privacysecurity #malwareprevention #onlinesecurity #phishingattacks #cybersecurity

Hello everyone.
In today's article, we examine Social Media Security in detail.

I wish everyone a good read:
https://denizhalil.com/2023/07/24/social-media-security-tips/

#socialmedia #accountsecurity #privacysecurity #malwareprevention #onlinesecurity #phishingattacks #cybersecurity