Back in 2023 I gave a talk called Your Phishing Program is a Waste of Time and Money (or rant, depending on your angle). This week Microsoft published what the other side's program looks like. Spoiler: theirs has a storefront, a sub-reseller tier, and over 2,300 templates. They built a business Microsoft's write-up describes YAM … Continue reading Phishing is an industry… Is your phishing program up to the challenge?
Tag: MFA
New PCI MFA Guidance
On February 9, 2017 the PCI SSC released a new Information Supplement Multi-Factor Authentication with the intent to aid Organizations in meeting Requirement 8.3. One interesting quote in the document’s Overview: While PCI DSS Requirement 8.3 does not currently require organizations to validate their MFA implementation to all the principles described in this guidance document, these principles may … Continue reading New PCI MFA Guidance
