VentureBeat reports that new phishing prevention capabilities have been introduced by Microsoft in an effort to better combat phishing threats against Office 365, Azure, and remote desktop environments.
Microsoft has unveiled certificate-based authentication that would allow Azure AD authentication among organizations with smart card and public-key infrastructure even if they lack a federated server.
Meanwhile, enterprises could leverage the new conditional access feature for implementing YuBiKeys for phishing-resistant multi-factor authentication, FIDO-based passwordless or certificate-based authentication, and other user authentication policies.
Microsoft has also added FIDO authenticator support for Azure Virtual Desktops in a bid to prevent phishing attacks and credential theft.
"Providing new identity solutions to protect our customers is paramount in the fight to stop phishing. We're excited to launch these new features that support key steps customers can take in their zero-trust journey, and Yubico has been with us fighting against these phishing attacks every step of the way," said Microsoft Identity and Network Access Vice President of Product Management Sue Bohn.
Included in the exposed dataset labeled "PDL" were individuals' full names, email addresses, phone numbers, location data, professional summaries, and skills, as well as education and employment histories.
Attackers could leverage the issue — which impacts Nexus 3000, 7000, and 9000 series switches with vulnerable NX-OS versions with DHCPv6 activated and are in standalone NX-OS mode — to facilitate continuous crashes of the dhcp_snoop process and a denial-of-service condition.
Higher rewards of up to $250,000 will be given by Google for the discovery of memory corruption flaws in the Chrome browser shown to achieve remote code execution using a non-sandboxed process as part of a more robust vulnerability reward program.