Remove Accountability Remove Event Remove Security Defenses
article thumbnail

How threat actors can use generative artificial intelligence?

Security Affairs

Deepfakes are media content—such as videos, images, or audio—created using GAI to realistically manipulate faces, voices, or even entire events. Attackers can use them to fabricate events, impersonate influential figures, or create scenarios that manipulate public opinion.

article thumbnail

How to Tell if Active Directory is Compromised

eSecurity Planet

It is possible for an attacker to employ attack strategies that would prevent any events from being recorded in the event logs. To look for signs of an attack, you can’t keep checking the event logs on every domain-joined computer or domain controller. Much depends on the attacker’s speed and ability.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

A PowerShell Script to Mitigate Active Directory Security Risks

eSecurity Planet

protocol in your environment via the Secure Channel method, enable Secure Channel logging on domain controllers. Look for Event ID 36880 after enabling Secure Channel logging, which will log the protocol version used to establish the connection. protocol, you will need to correlate multiple events.

Risk 142
article thumbnail

Top 12 Firewall Best Practices to Optimize Network Security

eSecurity Planet

Divide the network into different zones to assist with the principle of least privilege and make specific security measures easier to deploy. This method improves control and containment in the event of a breach by isolating affected segments while protecting the rest.

Firewall 120
article thumbnail

Vulnerability Recap 6/3/24 – Check Point, Okta & Fortinet Issues

eSecurity Planet

“The attempts we’ve seen so far… focus on remote access scenarios with old local accounts with unrecommended password-only authentication,” the security bulletin said. The fix: Check Point provided a hotfix with instructions for users to follow when patching their Security Gateway products. through 7.1.1 through 7.0.2

VPN 109
article thumbnail

What Is Lateral Movement? Detection & Prevention Tips

eSecurity Planet

If they make it far enough, they can steal credentials for privileged accounts and valuable data. We’ll look at lateral movement techniques and ways to detect and prevent attacks to give your IT and security teams a starting point for locating subtle but malicious traffic within your computer systems.

article thumbnail

Weekly Vulnerability Recap – Sept. 11, 2023 – Android Update Fixes 33 Vulnerabilities

eSecurity Planet

W3LL Phishing Tool Steals Thousands of Microsoft 365 Accounts Type of attack: W3LL, a threat actor, created a phishing kit that can defeat multi-factor authentication (MFA) , which allowed it to infiltrate over 8,000 corporate Microsoft 365 accounts. Also see the Google support page Check & update your Android version.

VPN 113