FireEye CEO Kevin Mandia testifies during a Senate Intelligence Committee hearing on Capitol Hill on February 23, 2021 in Washington, DC. FireEye owns Mandiant, founded by Mandia, which released research Tuesday about the need to lock down Active Directory Federation Services. (Photo by Drew Angerer/Getty Images)
Mandiant Tuesday posted a blog detailing a new attack strategy against Microsoft’s Active Directory Federation Services (AD FS). Researchers with the company believe the need to protect AD FS might be the unheralded second lesson from the SolarWinds campaign.
The main lesson organizations drew from the SolarWinds campaign was the need to protect against third-party risk and address supply chain security. Hackers that the United States linked to Russian Intelligence used a gimmicked update to the SolarWinds IT management software and other vectors to take over a variety of government agencies and private organizations.
Systems Engineer
Employer Description
Our Organization: SPIE, The International Society for Optics & Photonics, is a fast growing, not-for-profit, dedicated to the advancement of light-based research and technology. We serve researchers, students and the photonics industry with educational opportunities including scientific conferences, and publications.
Our People: We have scientists, writers, editors, event experts, software engineers, business intelligence engineers, mountain bikers, road cyclists, runners, hikers, skiers, snow & skate boarders, wake surfers, soccer players, dancers, actors, hula hoopers, video gamers, musicians, artists, mushroom hunters, foodies, travelers, animal lovers… in short, people of all kinds.
Our City: Bellingham: The City of Subdued Excitement… Home to Bellingham Bay, Lake Whatcom, Lake Samish, the San Juan Islands, Chuckanut Mountain, Galbraith Mountain, Mount Baker, Western Washington University, a growing list of brew pubs & distilleries, v
Thycotic Account Lifecycle Manager Adds Integration With AWS, Azure, And Active Directory Federation Services (ADFS) scoop.co.nz - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from scoop.co.nz Daily Mail and Mail on Sunday newspapers.
02/26/2021
Microsoft s Active Directory authentication solution got notably skewered during a Feb. 23 U.S. Senate hearing on the SolarWinds Orion software hack.
The hearing by the Senate Select Committee on Intelligence focused on how a software implant and other methods went undetected, enabling an espionage campaign that affected nine federal agencies and 100 companies, per a White House estimate. The hearing included testimony from four software company heads, who also answered senators questions about the attack.
A common theme associated with the comments was whether software security breaches should be legally mandatory for organizations.
A video recording of the hearing is available on demand at this page.
Issuetrak Plans Exciting New Features for 2021, Looks Back on a Productive 2020
With more product updates than ever before, 2020 was a stand-out year for Issuetrak.
Looking beyond the horizon, 2021 is shaping up to be even bigger.
News provided by
Share this article
Share this article
NORFOLK, Va., Feb. 16, 2021 /PRNewswire/ Issuetrak has been developing issue tracking and process management software for over 20 years, and 2020 was one of its most productive years to date. Last year alone, Issuetrak released 12 new major product updates as well as several additional bug fix and patch release updates.
The year s updates included the following features:
Round Robin issue assignment, which allows users to assign issues to available agents in rotation.