FOMC

Bitcoin

Security

Read

<img width="1200" height="720" src="https://coingape.com/wp-content/uploads/2019/12/microsoft-e1696854560495.jpg" class="attachment-full size-full wp-post-image" alt="Microsoft AI Offerings" decoding="async" style="float:right; margin:0 0 10px 10px;">
In a recent advisory, <a href="https://coingape.com/microsoft-partners-oracle-to-boost-ai-offerings-know-more-here/">Microsoft’s</a> security team has highlighted a growing concern in the digital security landscape, the exploitation of OAuth, a commonly used system for online identity verification. Cybercriminals increasingly target this system, leveraging hijacked user accounts to gain unauthorized access and permissions within various online platforms. This trend poses a significant threat to digital security and privacy. 
<h2 id="strong-microsoft-ramps-up-defense-against-oauth-abuse-strong">Microsoft Ramps Up Defense Against OAuth Abuse</h2> 
Cyber attackers <a rel="nofollow" href="https://thehackernews.com/2023/12/microsoft-warns-of-hackers-exploiting.html">employ many tactics</a>, including phishing and password-spraying, to compromise user accounts, particularly those without robust authentication. Once they gain control, these accounts are manipulated to deploy virtual machines (VMs) for illicit activities like crypto mining, perpetuate Business Email Compromise (BEC) attacks, and initiate large-scale spam campaigns using an organization’s resources. The exploitation of OAuth applications through these means presents a sophisticated challenge in the realm of cybersecurity. 
Microsoft has been actively monitoring these activities. The company’s efforts to enhance the detection of malicious OAuth applications are spearheaded by tools such as Microsoft Defender for Cloud Apps. These tools are crucial in preventing compromised accounts from accessing sensitive organizational resources. 
<h2 id="strong-conditional-access-policies-key-to-microsoft-security-strong">Conditional Access Policies Key to Microsoft Security</h2> 
In response to these threats, Microsoft has recommended that organizations bolster their defenses against such attacks. A critical step is the fortification of identity infrastructure. Microsoft’s analysis revealed that most compromised accounts lacked multifactor authentication (MFA), rendering them vulnerable to credential-guessing attacks. The implementation of MFA is a significant deterrent against such breaches. 
In addition to MFA, Microsoft emphasizes the importance of conditional access policies and continuous access evaluation. These measures are designed to revoke access immediately upon detecting potential risks, providing an added security layer. Microsoft also highlights the utility of its security defaults in Azure Active Directory, which benefits organizations using the free tier. These defaults include preconfigured security settings, such as MFA and safeguards for privileged activities. 
Moreover, Microsoft advises organizations to conduct thorough<a href="https://coingape.com/certik-completes-successful-audit-of-hi-dollar-smart-contract/"> audits of apps</a> and the permissions granted to them. This ensures adherence to the principles of least privilege, a cornerstone of effective digital security. 
Read Also: <a href="https://coingape.com/bitcoin-open-interest-rises-on-binance-coinbase-ahead-fomc/">Bitcoin Open Interest Rises On Binance &amp; Coinbase Ahead FOMC</a> 
The post <a href="https://coingape.com/microsoft-alerts-on-rising-oauth-crypto-exploitation-threats/">Microsoft Alerts on Rising OAuth Crypto Exploitation Threats</a> appeared first on <a href="https://coingape.com">CoinGape</a>.

Microsoft Alerts on Rising OAuth Crypto Exploitation Threats

Table of Contents

Coingape News Media

Other articles published on Dec 13, 2023

Solana’s BONK drops 21% despite Coinbase push

Top 5 Solana Blockchain Airdrops: An Opportunity Not To Miss?

Fetch.ai (FET) Reaches New Annual High

Messaging App LINE Secures $140 Million for Expansion of NFT Platform

Breaking News: CFTC greenlights Bitnomial’s Bitcoin futures platform

Crypto Prices Experience 3.5% Correction – Top 5 Picks for the Next Bull Run

Join our free newsletter for daily crypto updates!