Actor auth tokens gave Global Admin access across Azure Entra ID tenants
Kmart Australia's use of facial recognition breached privacy
NSW gov third party-linked cyber incidents quadruple in two years
FileFix attack tricks users into running image-borne malware
EPA Victoria hones its strategic workforce planning
exchange
Me and my job - Bernie Donnelly, vice president of quality assurance, Philadelphia Stock Exchange
ISV releases MMS-capable server for Exchange, Outlook
Review: Exchange Security Risk Auditor
Administrators often forget that management of emails isn't simply a question of who can send or receive them, or the content. When email arrives it sits in the inbox, but who has permission to access that inbox, or other folders for that matter?
With high turnovers of employees becoming increasingly common, the stressed administrator may well lose track of individual permissions. For example, many companies usually have a set of freelance or contract email accounts that can be assigned to temporary staff. The permissions required by one contractor may be far more extensive than those required by their successor, but they could very well inherit those permissions when they arrive. And human nature being what it is, inquiring minds will almost certainly take advantage of this, whether innocently or maliciously.
Exchange 2003 gets antispam, antivirus
