Resources
Blog
What is an Active Directory Forest?
Active Directory (AD) Organizational Structure: Understanding AD Forests Active Directory is a vital component of any Microsoft enterprise and often a target for threat actors. As such, it is important not only to secure Active Directory but understand how to best configure and manage its’ components in order to reduce
Visit Cayosoft at Gartner Identity and Access Management Summit | Booth #116
Connect With Us at the Gartner Identity and Access Management Summit Cayosoft is proud to be a sponsor for Gartner Identity and Access Management Summit 2022. Identity and access management (IAM) and IT leaders will come together to explore the latest trends in privileged access management, IAM programs and strategy, cloud
Connect with Cayosoft at Gartner Security and Risk Management Summit
Join Us at the Gartner Security and Risk Management Summit Cayosoft is proud to be a sponsor for Gartner Security and Risk Management Summit 2022. IT and security professionals will come together to explore and share the latest trends in cybersecurity, IT threat mitigation, and new initiatives to safeguard their
Understanding IAM: Everything You Need to Know About the Components of Identity and Access Management
Discover the Essential Components of Identity and Access Management Beginning in 2021, the second Tuesday of April is Identity Management Day. As a joint venture between the Identity Defined Security Alliance (IDSA) and the National Cybersecurity Alliance (NCA), Identity Management Day was created to raise awareness and educate business leaders,
Senate Passes Cybersecurity Act: Orgs to Report Cyberattacks & Ransom Payments
The Senate on Tuesday passed major cybersecurity legation, moving one step closer toward forcing critical infrastructure companies to report cyberattacks and ransomware payments. The passage comes as federal officials have repeatedly warned of the potential for Russian cyberattacks against the United States amid the escalating conflict in Ukraine. The legislation,
Azure AD Connect: New Update
New Azure AD Connect Version 2.0.91.0 Released This week, Microsoft released an updated version of Azure AD Connect. This new version provides compliance of the Azure AD Connect Health component with the Federal Information Processing Standards (FIPS) requirements. Keep track and understand all the versions that have been released —
‘Wormable’ Flaw Leads January 2022 Patch Tuesday
Microsoft Releases Over 100 Updates in Patch Tuesday for January 2022 The January security updates from the Redmond-based software giant cover security defects in a wide range of default Windows OS components, including a critical flaw in the HTTP Protocol Stack (http.sys) that Microsoft describes as “wormable,” and another code
ManageEngine Zero-Day Flaw Actively Being Exploited
FBI Warns: APT Groups Exploiting Critical Vulnerability in ManageEngine Software Earlier this month, the FBI and Cybersecurity and Infrastructure Security Agency (CISA) released a joint advisory highlighting a newly discovered vulnerability being actively exploited in ManageEngine ServiceDesk Plus, owned by Zoho Corp, an IT help desk and asset management software.
FBI & CISA Warning: ManageEngine Flaw Poses Serious Risk
APT Actors Exploit Vulnerability in ManageEngine ADSelfService Plus Reports confirm a critical security vulnerability in ManageEngine ADSelfService Plus, a self-service password management and single sign-on (SSO) tool for Active Directory environments, is actively being exploited. This newly discovered vulnerability, CVE-2021-40539, presents a critical authentication bypass risk that affects REST API
Credentials for Nearly 500,000 Fortinet VPN Users Leaked
Hackers Leak Passwords for Fortinet VPN Servers A list with nearly half a million Fortinet VPN user credentials, allegedly scraped from unprotected devices, is now being shared on hacker forums across the dark web. On Tuesday, a threat actor known as “Orange”, thought to be a member of the popular
New Microsoft Vulnerability, MSHTML RCE, Under Active Attack
Microsoft Alerts of New Zero-Day Flaw in Windows Microsoft released a security alert yesterday announcing a newly discovered flaw for a remote code execution (RCE) in MSHTML that is currently being exploited. MSHTML, also known as Trident, is a component used as a browser rendering engine for Microsoft Office documents.
New Pricing for Microsoft 365
New Commercial List Pricing for Office 365 Microsoft announced changes to their commercial pricing for Microsoft 365—the first substantive pricing update since the launch of Office 365 a decade ago. Microsoft says that this updated pricing reflects the increased value they have delivered to their customers over the past 10
New Find: Windows 365 Exposes Microsoft Azure Credentials In Plaintext
Windows 365 credentials can be dumped in plaintext On August 2nd, 2021, Microsoft launched their Windows 365 cloud-based desktop service, allowing users to rent Cloud PCs and access them via remote desktop clients or a browser. One of the lucky few who could get a free trial was Benjamin Delpy,
Thank Your SysAdmins – It’s System Administrator Appreciation Day!
Happy System Administrator Appreciation Day! System Administrator Appreciation Day, also known as SysAdmin Day, is an event created by System Administrator, Ted Kekatos. It all started when Kekatos saw a magazine advertisement in which a System Administrator was presented with flowers and fruit-baskets by grateful co-workers as thanks for installing
3rd Windows Print Spooler Critical Vulnerability Detected
Windows PrintNightmare Vulnerabilities & Exploits Continue At the end of June and earlier this month, Microsoft released a security update regarding a Windows Print Spooler critical vulnerability, now being called PrintNightmare. Their original guidance, CVE-2021-1675, was quickly met with backlash as patches released by Microsoft were reported to not fix