Did you know?

Here's a few common terms throughout this issue explained

Active Directory (AD)

Active Directory is a centralized database that stores information about users, computers, and other resources in a networked environment. It provides authentication and authorization services, allowing users to access resources securely.

Account compromise

Also known as account takeover fraud, is the process by which an attacker gains access to a user's account. This can lead to a range of risks, including data theft, identity theft, financial fraud, and damage to the victim's reputation.

Identity Threat Detection and Response (ITDR)

Technology to help prevent identity related risks in your environment and detect real-time identity threats with automated remediation. Many of these risks result from ordinary business/IT operations and can go undetected by administrators whilst being exploited by attackers.

MFA bypass

A technique used by attackers to bypass multi-factor authentication (MFA) measures and gain unauthorized access to an account or system, typically through social engineering, phishing, or exploiting vulnerabilities in the MFA implementation.

Multifactor authentication (MFA)

To increase the security of user accounts, multifactor authentication (MFA) adds a layer of protection from hackers, an example of which is ‘two-factor authentication’ or 2FA.This is a process where you log into your account using not only your password (known credential) but also provide a secondary factor or code to confirm it’s really you, such as token generated by a smartphone app or a biometric.

Privileged Account Management (PAM)

PAM is the practice of securely managing and monitoring user accounts with elevated permissions, to prevent unauthorized access, misuse, and potential security breaches.

Red team

A red team is a group of security professionals who simulate real-world attacks on an organization's systems and infrastructure to identify vulnerabilities and improve the organization's security posture.

TOAD attack

TOAD stands for ‘telephone orientated attack delivery’. In a TOAD attack, targets receive a message often containing a fake invoice or an alert requiring action. The message also contains a customer service number for anyone with questions. If the victim calls the number, they find themselves on the line with a cyber attacker.

ABOUT PROOFPOINT, INC.

Proofpoint, Inc. is a leading cybersecurity and compliance company that protects organizations’ greatest assets and biggest risks: their people. With an integrated suite of cloud-based solutions, Proofpoint helps companies around the world stop targeted threats, safeguard their data, and make their users more resilient against cyber attacks. Leading organizations of all sizes, including 75 percent of the Fortune 100, rely on Proofpoint for people-centric security and compliance solutions that mitigate their most critical risks across email, the cloud, social media, and the web. More information is available at www.proofpoint.com.

©Proofpoint, Inc. Proofpoint is a trademark of Proofpoint, Inc. in the United States and other countries. All other trademarks contained herein are property of their respective owners. Proofpoint.com

NEW PERIMETERS

This magazine is provided as a statement of direction regarding our product development activities and is provided for discussion purposes only. It should not be relied upon in making a purchasing decision. The development, release and timing of any features or functionality for our products remains at Proofpoint’s sole discretion.