Resetting my Office 365 Password

Quick how to guide for what to do when you receive your new password from us.

I see fake emails (False positives). Why is this important?

Fake email accounts are routinely created by employees as a “throw away” when wanting to gain access to a system or piece of data.

I'm seeing multiple users with the same password being exposed on the same day, What does that mean?

In most cases, someone is testing a password against a series of users to gain access.

What is the difference between a privileged user and standard user?

The Standard User does NOT have access to view passwords.

Can I track personal email accounts for compromises?

We allow for up to 5 personal email addresses per organization to be tracked, in addition to all emails on the company domain.

The password identified does not meet our network criteria. Why should we care about this?

Employees often recycle passwords throughout their work and personal networks. If your internal requirement is to have a capital letter and special character, it’s common practice for employees to use a password they are familiar with, and add a capital letter and exclamation mark.

Any "Best practices" for individual users or corporate IT on frequency of password change or actually changing your personal or professional email?

https://pages.nist.gov/800-63-3/sp800-63b.html

Are there any special credentials needed to investigate the Dark Web?

You do not need special permission to access the deep or Dark Web.

What is PerSwaysion Spear Phishing ?

PerSwaysion spear-phishing campaign targeting multiple organisations by abusing Microsoft Sway in Office 365

Maze Ransomware

On April 18th 2020, Cognizant has been hit with maze ransomware. Maze ransomware has been more active since the start of COVID-19 pandemic. In Last 3 months more than 10 cyber attacks known to have maze ransomware part of it.