Decoding Technology

Practical perspective for businesses

Security

Posts about information security, including data security, network security, operational security, and best practices.

Email Authentication: SPF, DKIM, DMARC (Oh my?)

15 September 2023 by mikevarian Security

Email is open protocol without any strict governing body in control of it, which makes them ubiquitous but also inherently untrustworthy. Much like anyone can send a letter via the US Mail that has Read more

Dangerous Software Warning: OneLaunch Browser Replacement

20 July 2023 by mikevarian Security

Quick Explanation NorthSky Technology has identified a browser replacement application called OneLaunch which we have observed to be highly correlated to account compromise, and as a result we Read more

Suspicious Email Red Flags

03 May 2023 by mikevarian Security

Emails are inherently untrustworthy, and even if your own security is effective, vulnerability among others you communicate with still leave you at risk. Having said that, it is difficult to be Read more

Suspicious Email Red Flags

03 May 2023 by mikevarian Security

Emails are inherently untrustworthy, and even if your own security is strong, vulnerability among others you communicate with still leave you at risk. While difficult to be careful with every single Read more

An Example Framework for an Information Security Policy

22 October 2021 by mikevarian Security

Introduction It has long been good practice for organizations to establish and maintain an Information Security Policy, and with each passing year they become increasingly important. As technology Read more

Office365 MFA Setup Guide

15 October 2021 by mikevarian Security

Initial Setup Multifactor Authentication is a security measure to help protect your account against even if someone knows your password. On your computer, log in at https://aka.ms/mfasetup with your Read more

Zoom and Security - Should you be concerned?

28 April 2020 by mikevarian Security

The Headlines In December 2019, Zoom had 10 million users. In April 2020, they surpassed 300 million! (Incredibly, they scaled 30x in 4 months without a single major service interruption - a headline Read more

Beware COVID-19 / Coronavirus Scams

16 March 2020 by mikevarian Security

With the high volume of legitimate urgent emails regarding the COVID-19 pandemic, please think before you click! It is a disgusting practice, but unfortunately, like clockwork, when there is a large Read more

Warning: New trend may bypass spam filters

04 March 2020 by mikevarian Security

Please be advised that we have observed attackers leveraging vulnerabilities in public web services this week to successfully bypass spam and phishing email protections. This has resulted in numerous Read more

Open Redirect Vulnerability in Slack

04 March 2020 by mikevarian Security

Background The morning of March 2nd, 2020, we were surprised to see obvious phishing emails deliver right into our inbox. This means they bypassed a multi-layered set of anti-phishing and anti-spam Read more