Marcus White

Articles written by Marcus White

• Jul

  24

  

  Never expire passwords? Why we shouldn’t ditch password expiry just yet.  

  Resetting passwords via service desk tickets and support calls is an everyday burden on IT teams. Users are equally frustrated when the ‘time to change your password’ notification pops up during a busy work day – especially when they realize…

  Read More

• Jul

  19

  

  Update to GLBA safeguards rule: What you need to know

  Financial institutions are at the forefront of cybersecurity challenges due to the sensitive nature of the data they handle. As the frequency and sophistication of cyberattacks increase, so does the need for robust regulatory safeguards, requiring organizations to bolster their…

  Read More

• Jul

  10

  

  Active Directory honeypot accounts: How to keep attackers sweet

  Monitoring and detecting account compromise is one of the most challenging tasks for IT admins and SecOps professionals. Once a legitimate account has been compromised, it can be difficult to detect an attacker’s activities until it’s too late and damage…

  Read More

• Jul

  03

  

  Kerberoasting attacks: How to keep your Active Directory safe

  A domain administrator account is the holy grail of privileged accounts in a Microsoft Active Directory environment. If an attacker can get their hands on a Domain Administrator account in the domain, they’ll have access to basically everything. Kerberoasting is…

  Read More

• Jun

  26

  

  Active Directory password hardening: How it’s done   

  Weak passwords are a problem waiting to happen – Verizon estimates that 80% of hacking-related breaches come from weak or stolen passwords. They’re the most common way for people to access their accounts and applications, making them an obvious attack…

  Read More

• Jun

  22

  

  MFA prompt bombing: How it works and how to stop it

  User credentials are golden prizes for attackers. Weak or breached credentials provide an easy target for attackers looking to log in to a network instead of breaking in. Most businesses have caught on to the fact that multi-factor authentication (MFA)…

  Read More

• Jun

  13

  

  Six ways to apply the principle of least privilege to your Active Directory

  The principle of least privilege is simple but important: it states that users only have the minimum access necessary to perform their job. For organizations using Active Directory (over 90% of the Fortune 100), this means the minimum necessary permissions…

  Read More

• May

  17

  

  [New Research] How hard is the MD5 hashing algorithm to crack?

  The Specops research team is publishing new data on how long it takes attackers to brute force guess user passwords with the help of newer hardware. They've been specifically looking at passwords protected by the popular MD5 hashing algorithm. This…

  Read More

• May

  23

  

  Guide to the PCI-DSS v4.0.1 regulations [Updated for 2025]

  The PCI DSS compliance framework has been a staple in the cybersecurity realm for businesses handling credit card transactions. The Payment Card Industry Data Security Standard was developed to encourage and enhance payment card account data security. It helps define consistent security measures…

  Read More

• Feb

  28

  

  What is Active Directory (AD) and how does it work?

  Active Directory (AD) is Microsoft’s directory service for Windows domain networks—a centralized database that stores information about users, computers, groups, policies and other objects in your network. It uses a hierarchical, object-oriented structure to organize resources, allowing administrators to manage…

  Read More