If, like me, you have older parents who sometimes struggle with technology, but you want them to move off of using FB messenger, sms, etc and onto Signal, my tip is to drop the Signal app icon in a group with the normal text message app icon, so they have to look at both before messaging. This is useful to develop new patterns in general, not just good for technophobes :)

#SecurityTip

NO-BREAK SPACE unicode characters in the display name are not something your average M365 users use.

So better look into #Teams chat messages from those users.

#SecurityTip #KQL

https://github.com/f-bader/AzSentinelQueries/blob/master/Defender%20XDR/SuspiciousTeamsMessagesBasedOnUnicodeInDisplayName.md

⚠️ Did you know? Over 40% of Google Cloud instances are potentially at risk due to default service account vulnerabilities!

Default service accounts can be convenient, but they often come with high permissions, creating serious risks. 💡 Tip: Apply the principle of least privilege by narrowing down access scopes—this helps prevent unauthorized access.

What other security tips do you swear by for cloud environments? Let’s discuss! 💬

Read more in our latest blog post: https://guardiansofcyber.com/cybersecurity-news/google-cloud-instances-risk-default-accounts/

#Cybersecurity #GuardiansOfCyber #DataProtection #GoogleCloud #SecurityTip #CloudSecurity #Guardians #DataPrivacy #TechInsights #CyberAwareness

Fun little vulnerability I found recently:
Change any user's profile picture based on the provided `?id=x` query parameter! 😈

Always pull User ID from the Auth system, rather than rely on a value from the browser...
#PHP #Laravel #SecurityTip

A quick #securitytip on how to block password-protected attachments in emails.

If you have #Microsoft #Defender for #Office365 licenses, you can use the technology called Safe Attachments. Safe Attachments do advanced scanning of attachments through so called detonations, where these attachments are run on a test environment and what the file does when it is run is monitored.

If an email contains a password-protected attachment, then these detonations cannot take place. In the Safe Attachments settings, you can set what should happen if the scan couldn't complete for some reason, which is exactly the case with the password-protected attachment. In this case, it is recommended to set the email to be blocked. #email #mdo #cybersecurity #bes