Microsoft Entra ID Primary Refresh Tokens (PRTs) are an attractive target for threat actors because they are long-lived, they are broadly scoped and they often don’t have additional multifactor authentication requirements after they are obtained. In this blog, we will discuss what PRTs are, how they are issued and how recently released research gives threat attackers a new way to obtain them. Finally, we will examine how organizations can detect these attacks using CrowdStrike Falcon Next-Gen SIEM.

Managing compliance across various frameworks and standards can be challenging and confusing. Organisations must earn and maintain compliance with local and international standards and industry-specific regulations, all while keeping up with ever-evolving security and privacy best practices. This is particularly true for startups and scaleups in the ANZ region looking to accelerate growth, expand into international markets, and sell to new and larger customers with higher expectations. ‍

India's Securities and Exchange Board (SEBI) has introduced a new regulatory framework called the Cyber Security and Cyber Resilience Framework (CSCRF). The regulation aims to tighten cybersecurity and data governance for capital market participants. As cyber threats increase globally, the CSCRF is poised to create a stronger defense line for organizations operating in India’s capital markets.

Nowadays, the digital supply chain is both essential and vulnerable. According to Pinsent Masons annual cyber report, supply chain breaches were the most common form of cyber incident in 2023 occuring in one third of cases (up from 5% in 2022). Meanwhile, Gartner predicts that almost half (45%) of global organizations will suffer a digital supply chain attack by 2025. Nowadays, the digital supply chain is both essential and vulnerable.

Data protection has become a critical concern worldwide as digital transactions and data exchanges grow. Countries are establishing strict data protection laws to safeguard personal information, and India is no exception. The Digital Personal Data Protection (DPDP) Act is India’s response to growing privacy concerns and the need for robust regulations around personal data usage.

Depending on the industry, location, and business operations of your organization, you may have any number of cybersecurity regulations to comply with. Keeping track of each law that affects your organization and the various requirements associated with them can be overwhelming, but the consequences of noncompliance are often far worse.