Security in Depth does not work read the Newspapers.

CISA has seen an APT actor using compromised applications in a victim’s Microsoft 365 (M365)/Azure environment. CISA has also seen this APT actor utilizing additional credentials and Application Programming Interface (API) access to cloud resources of private and public sector organizations. These tactics, techniques, and procedures (TTPs) feature three key components:

·        Compromising or bypassing federated identity solutions;

·        Using forged authentication tokens to move laterally to Microsoft cloud environments; and using privileged access to a victim’s cloud environment to establish difficult-to-detect persistence mechanisms for Application Programming Interface (API)-based access.

You need a better solution

NEXT LEVEL has software that will detect third party access to data either to internal systems or in the cloud. Any unauthorized third party that tries to access data will be detected and prevented from viewing data files hosted by internal systems or in an external cloud environment. NEXT LEVEL software can be primed to: 

a) Check to see if the third party has access credentials or permission to do such activity and also setup to send alerts to your company’s authorized people.

b) Stop the unauthorized third party if they don't have permission 

c) Confirm the breach with a manager or administrator 

d) Detect the unknown (as in the foreign user)

e) In the event that a so-called administrator does the unusual, that activity will be isolated and reported. This can prevent unauthorized internal down loads as so often makes the papers.

Best of all the third party cannot turn off the software because it is cloud based - unlike SIEMS, AVs and Firewalls, etc.

NEXT LEVEL also has an encryption tool and management methodology that interoperates with existing databases, applications, and network security technologies, and is compatible with endpoint devices or cloud applications. The tool utilizes encryption technology designed to protect data through the next decades, operates on the simplest devices, and eliminates the arduous task of managing encryption keys.

Maybe you should discover if you really are secure give us a call we can run an analysis to prove you are not as secure as you have been telling your boss. Maybe you are secure but at least you will know.

Give us a call 

Alan Knapp 203-834-1218  [email protected]

Brian O’Connor 203-590-3892 [email protected]