The following list contains examples of configuration vulnerabilities: These security oversights have led to user and mailbox compromises and vulnerabilities. In addition, the majority of these organizations did not have a dedicated IT security team to focus on their security in the cloud. The organizations that used a third party have had a mix of configurations that lowered their overall security posture (e.g., mailbox auditing disabled, unified audit log disabled, multi-factor authentication disabled on admin accounts). Since October 2018, the Cybersecurity and Infrastructure Security Agency (CISA) has conducted several engagements with customers who have used third-party partners to migrate their email services to O365.
0 kommentar(er)
