#147 - Betting on MFA

CISO Tradecraft®

内容由G Mark Hardy & Ross Young, G Mark Hardy, and Ross Young提供。所有播客内容（包括剧集、图形和播客描述）均由 G Mark Hardy & Ross Young, G Mark Hardy, and Ross Young 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品，您可以按照此处概述的流程进行操作https://zh.player.fm/legal。

8M ago 42:45

MP3•单集首页

There's a lot of new cyber attacks occurring and today we are going to talk about them in more detail. Many bad actors are using SMS spoofing and Social Engineering to get in. Listen in an learn about how those attacks played out against the casino industry. You don't want to miss when we share what you can do to stop them. Pro-tip: Good MFA is your friend. Use it everywhere you can including on your employees and customers during phone calls.

Big Thanks to our Sponsor

Risk3Sixty - https://risk3sixty.com/whitepaper/

Mandiant Post - https://www.mandiant.com/resources/blog/unc3944-sms-phishing-sim-swapping-ransomware

Rachel Tobac Post - https://www.linkedin.com/feed/update/urn:li:activity:7108040643905474562

Transcripts: https://docs.google.com/document/d/186g8y_8wMcBPwdaiFjduhRiXC88ice0T/

Chapters

00:00 Introduction
01:06 Improving the Attacker Odds at the Casino
04:09 SEC 8-K filings
13:28 MGM Timeline of attack
16:55 What can we do against these attacks?
22:51 Upgrading your MFA
24:16 Custom Authentication Strength
27:11 New Social Engineering Attacks
32:31 OKTA attacks