
The Cyber Bulletin:
November 2024
Brought to you by DP Solutions
Welcome to DP Solutions' Cyber Bulletin!
This monthly cyber recap, curated by our Cybersecurity Team, lists recent significant cybersecurity events, news, and breaches to keep you in-the-know on current cyber-incidents and provide recommendations.
These articles are meant to be informative, and we encourage everyone to do their own research.
Scroll down to read this month's cyber bulletin! ↓
Subscribe to the Cyber Bulletin
Mandatory MFA is coming to Google Cloud. Here’s what you need to know
Google will be enforcing Multi-Factor Authentication (MFA) for all users in 2025 by rolling it out in phases. Starting in November 2024, users will receive notifications encouraging them to enroll. Gradually users that sign in to Google with a password will need to enable MFA. Lastly, users that federate authentication to Google cloud will be required to use MFA.
Solving the painful password problem with better policies
Users have a tendency to reuse passwords across platforms allowing hackers to gain access to multiple sites when they obtain one credential. Businesses should create a secure, effective password security policy in addition to regular awareness training to enhance their security posture.
Washington courts' systems offline following weekend cyberattack
Washington state courts proactively took their systems offline after detecting "unauthorized activity" on their networks causing courts to operate with limited services. The Administrative Office of the Courts (AOC) worked to secure critical systems and safely restore services.
Canada Orders TikTok to Shut Down Canadian Operations Over Security Concerns
The Canadian government ordered ByteDance to close TikTok's Canadian offices due to national security concerns. While the app itself remains accessible to the public, it has been banned on government devices since 2023. TikTok plans to challenge the decision, noting that the closure would result in the loss of hundreds of local jobs.
Nokia says hackers leaked third-party app source code
A threat actor claimed to release Nokia data stolen from a third-party vendor. Nokia conducted an investigation and did not find any evidence that their systems or data had been impacted. The leaked code came from a third-party application and did not contain any Nokia code.