Storm-0558 - Attack on Exchange Online
Blue Security17 Juli 2023

Storm-0558 - Attack on Exchange Online

On this week's episode, Adam and Andy talk Storm-0558, the China-based actor, that compromised Exchange Online. They go through the attack chain and CISA's guidance on how you can better protect your organization going forword.

-------------------------------------------

Youtube Video Link: https://youtu.be/N7dRPCCU25A⁠⁠⁠⁠⁠⁠⁠⁠

-------------------------------------------

Documentation: https://blogs.microsoft.com/on-the-issues/2023/07/11/mitigation-china-based-threat-actor/

https://www.microsoft.com/en-us/security/blog/2023/07/14/analysis-of-storm-0558-techniques-for-unauthorized-email-access/

https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-193a

https://learn.microsoft.com/en-us/compliance/assurance/assurance-audit-logging

https://learn.microsoft.com/en-us/microsoft-365/compliance/audit-log-enable-disable?view=o365-worldwide

https://learn.microsoft.com/en-us/microsoft-365/compliance/audit-premium?view=o365-worldwide

https://learn.microsoft.com/en-us/microsoft-365/compliance/audit-log-search?view=o365-worldwide

----------------------

Contact Us:

Website: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://bluesecuritypod.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

Twitter: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://twitter.com/bluesecuritypod⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

Linkedin: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.linkedin.com/company/bluesecpod⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

Youtube: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.youtube.com/c/BlueSecurityPodcast⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

Twitch: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.twitch.tv/bluesecuritypod⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

-------------------------------------------

Andy Jaw

Mastodon: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://infosec.exchange/@ajawzero⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

Twitter: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://twitter.com/ajawzero⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

LinkedIn: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.linkedin.com/in/andyjaw/⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

Email: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠andy@bluesecuritypod.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

-------------------------------------------

Adam Brewer

Twitter: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://twitter.com/ajbrewer⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

LinkedIn: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.linkedin.com/in/adamjbrewer/⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

Email: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠adam@bluesecuritypod.com

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(332)

Anthropic Threat Intelligence Report

Anthropic Threat Intelligence Report

SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss Anthropic's latest threat intelligence report, highlighting the evolving landscape of cyber threats facilita...

22 Sep 53min

LG TV's data collection and Crowdstrike Zero Day

LG TV's data collection and Crowdstrike Zero Day

SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam celebrate six years of consistent podcasting, reflecting on their journey and the evolution of their roles in the tech industry...

15 Sep 44min

LiteLLM Breach, an Entra Connect Deadline, and 153 Million Leaked IDs

LiteLLM Breach, an Entra Connect Deadline, and 153 Million Leaked IDs

SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer delve into significant cybersecurity topics, including the Light LLM breach, a supply chain attack that affected tho...

8 Sep 45min

AI 101 - Understanding core AI terminology

AI 101 - Understanding core AI terminology

SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam delve into the complexities of AI in cybersecurity, focusing on the adoption rates and understanding of various AI technologies...

1 Sep 54min

DEF CON Is Not Cooked; Why AI Won't Replace Cybersecurity

DEF CON Is Not Cooked; Why AI Won't Replace Cybersecurity

SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss the implications of AI on cybersecurity, particularly in light of recent comments from Jason Haddock regardi...

25 Aug 46min

Evil Twins, AI Agents, and Cyber Privateers

Evil Twins, AI Agents, and Cyber Privateers

SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss significant cybersecurity topics, including an evil twin attack on a Delta flight, the emergence of fully au...

18 Aug 40min

Critical infrastructure hacks and rogue AI agents

Critical infrastructure hacks and rogue AI agents

SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss the recent cyberattacks on water systems in Minnesota, attributed to Iran-linked hackers. They explore the v...

11 Aug 54min

Hotel Wi-Fi Hijacks and Border Phone Searches

Hotel Wi-Fi Hijacks and Border Phone Searches

SummaryIn this episode of the Blue Security Podcast, host Andy Jaw and guest Carly Salmon discuss critical issues in data security, focusing on a recent hotel Wi-Fi hack that exploits DNS settings to ...

4 Aug 47min

Populärt inom Teknik

natets-morka-sida
uppgang-och-fall
elbilsveckan
bilar-med-sladd
market-makers
rss-laddstationen-med-elbilen-i-sverige
rss-en-ai-till-kaffet
rss-elektrikerpodden
skogsforum-podcast
rss-technokratin
rss-ai-med-jonas-benjamin
rss-sakerhetspodcasten
rss-uppgang-och-fall
rss-veckans-ai
rss-snacka-om-ai
developers-mer-an-bara-kod
rss-powerboat-sverige-podcast
bli-saker-podden
rss-it-sakerhetspodden
rss-fabriken-2