The company wants its users to move away from using SMS in two-step verification.

The guide comes as the government continues to deal with the fallout of the Salt Typhoon hack.

The kits, which the company said were a sophisticated approach to bypassing multifactor authentication, pose a particular threat to the financial services sector.

The interim Federal Chief Information Security Officer spelled out some 2025 agenda items for feds at CyberTalks.

Shelly Hartsook said she’s seen promising data on implementation of security protocols ahead of next week’s due date for agencies to submit updated plans.

Officials at the cyber agency are doubling down on shifting the security onus to software makers.

An international advisory says that the purpose of the “brute force” attacks is to sell the info to cybercrime forums.

The requirement begins Oct. 1. and would apply to plugin and theme authors.

Microsoft researchers say the group, tracked as Storm-0539 or Atlas Lion, targets employees with major U.S. retailers who control gift card operations.

The commitments are voluntary, but CISA officials said they are committed to measuring progress by the signatories across key commitments over the next year.