{
  "timestamp": "2025-02-05T22:39:41.921076",
  "content": "Search Free Trial Get Demo Microsoft Finally Acknowledges COVID-19-Related Cybercrimes July 16, 2020 On July 7, Microsoft revealed theyve been working since December 2019 to wrest control of key domains used in vast cyber attacks in 62 countries. This particular phishing scheme used COVID-19-related lures to defraud Microsoft 365 customers. Its one of many attacks weve seen. With tensions high and IT resources stretched to the limit, the pandemic is the perfect storm for cloud inbox security. Related Microsoft 365 Is Wildly Successful and Profoundly Vulnerable  Heres Why But this isnt a 2020 phenomenon The really sobering stat? Before Covid-19, 78 of Microsoft 365 administrators were already reporting security breaches, citing phishing as the leading cause. And according to the FBIs 2019 Internet Crime Report , those phishing attacks cost US businesses and local governments 1.7 billion last year. No matter the state of the pandemic, vaccinations, or a return to somewhat normal life, Microsoft will remain uniquely vulnerable to phishing Its native security has a 16 false negative rate for spam and phishing emails, according to Mimecast. If a scammer uses a spoofedlookalikesoundalike domain that doesnt exactly match your domain name, Microsoft 365 wont flag the activity. It also wont flag spoofed domains for your business partners or even well-known brands. Saleforce.com will still go through. Microsoft 365 uses static blacklists when scanning URLs for threats. Meanwhile phishing sites can have short life spans, even just a few hours. Analyzing each site in real time is a far stronger form of prevention. And Microsoft 365 has features such as Safe Attachments , which uses virtual sandboxing to scan attachments in an email. But sophisticated threats require deeper inspection of embedded documents and code. Inbox Detection and Response is our best defense Enterprises using cloud-hosted email urgently need an inner layer of email security called Inbox Detection and Response IDR. While the trusty Secure Email Gateway filters spam and known threats, it cant detect sophisticated or evasive attacks like spear phishing and cousin domain spoofing. IDR solutions instead hook into users inboxes, continuously scan all inbound and outbound emails in all folders, and automatically follow links. They check URLs for favicons, mismatched logos, legitimate site maps, domain owners, security certificates, even regionalized code  all indicators that help flag, Is this a valid email or is it phishing? Best of all, when threats are uncovered, IDR solutions can automatically delete every copy across every mailbox. This automatic remediation removes the burden on the email administrator or security analyst and massively reduces the feared window of vulnerability caused by malicious emails lingering for lengthy periods within the reach of users. Learn more about Cyren Inbox Security Cyren Inbox Security was built to safeguard each and every Microsoft 365 mailbox in your organization. It is a continuous and automated layer of security right in the user mailbox Persistently rescans inbound, outbound and delivered emails in all folders Reduces investigative overhead with automated incident and case management workflows A seamless mailbox plugin lets users scan and report suspicious emails Our threat visibility is unsurpassed. Cyrens global security cloud processes 25 billion email and web security transactions every day identifies 9 new threats and blocks over 3,000 known threats each second. Ready to play with Cyren Inbox Security for Microsoft 365? Start a 30-day trial, no credit card needed  Try it for Free Instant Data Classification Cyren URL Category Chacker Prev Spear Phishing, Whaling, and Delayed Detonation, Oh My! PEMPEMPEM  Hiding Behind Fake Certificates! Next Company Partners Resources Investor Relations Products Freeware Demo Solutions Contact Us Privacy Management Service by Data443",
  "analysis_type": "comprehensive",
  "analysis": "### Analysis of Security-Related Content\n\nThe content provided discusses the vulnerabilities in Microsoft 365, particularly related to phishing attacks, and introduces Cyren Inbox Security as a solution. Below is an analysis based on the specified areas:\n\n#### 1. Key Security Features and Their Benefits to Users\n- **Continuous Email Scanning**: Cyren Inbox Security continuously scans all inbound, outbound, and delivered emails across all folders, enhancing detection of phishing attempts and malware.\n- **Automated Remediation**: The solution automatically deletes threats across all mailboxes once identified, reducing the risk window and administrative burden.\n- **Advanced Threat Visibility**: Cyren's global security cloud processes 25 billion transactions daily, identifying new threats and blocking known ones, providing comprehensive threat intelligence.\n- **User Reporting Plugin**: Allows users to easily report suspicious emails, fostering a collaborative security environment.\n\n**Benefits**: These features improve phishing detection rates, reduce response time to threats, and empower users to contribute to security efforts.\n\n#### 2. Compliance Certifications and Regulatory Adherence\nWhile specific certifications like ISO 27001 or SOC 2 are not mentioned, ensuring compliance with such standards is crucial for data security. Organizations should verify that solutions meet relevant regulatory requirements.\n\n#### 3. User-Focused Security Recommendations\n- **Phishing Education**: Train users to recognize phishing tactics, such as suspicious links or mismatched domains.\n- **Verify Senders**: Advise users to confirm sender identities, especially for sensitive requests.\n- **Use Reporting Tools**: Encourage users to utilize Cyren's plugin to report suspicious emails.\n- **Regular Updates**: Ensure all software and plugins are updated to protect against vulnerabilities.\n\n#### 4. Technical Security Implementation Details\n- **Integration Method**: Cyren likely uses APIs or plugins to integrate with Microsoft 365, enabling continuous monitoring and automated responses.\n- **Real-Time Analysis**: Emphasizes real-time URL checks over static blacklists, improving detection of short-lived phishing sites.\n\n#### 5. Data Protection Measures\n- **Data Handling**: Cyren should ensure encrypted data transmission and secure processing. Specifics would require further details from the provider.\n- **Privacy Compliance**: Adherence to GDPR and CCPA is essential for data protection and avoiding legal issues.\n\n#### 6. Best Practices for End Users\n- **Security Awareness Training**: Regular training sessions to stay informed on threats.\n- **Incident Response Plan**: Establish protocols for quick and effective response to detected threats.\n- **Layered Security Approach**: Combine multiple tools and strategies to enhance protection.\n\n### Conclusion\nWhile the content effectively highlights vulnerabilities and introduces Cyren as a solution, it lacks specifics on compliance and data protection. Emphasizing user education, regular training, and layered security approaches will enhance overall security posture."
}