Tech Giants and Startups Tackle Security: Latest Updates in Email, MFA, and SBOM

Google and Yahoo have announced new measures to crack down on spam. Yahoo will implement rules requiring bulk senders to use more robust email authentication while requiring one-click unsubscribe and enforcing a two-day response time for unsubscribe requests. Similarly, Google will require bulk senders to validate their identities and strongly authenticate their emails. They will also execute a spam rate threshold and implement a one-click unsubscription.

AWS will require multi-factor authentication (MFA) for root user accounts to sign into the AWS Management Console starting in mid-2024. This security measure aims to enhance account security and prevent unauthorized access. AWS will expand the MFA requirement to additional scenarios and support up to eight MFA devices and FIDO security keys. Customers will be notified of the upcoming change and are encouraged to enable MFA for all user types in their environments.

Yubico now offers the ability for its enterprise users to receive pre-registered security keys, reducing the friction of registration. The new FIDO Pre-reg service is currently in a limited access period for Okta customers in the U.S. and will support all Yubico’s keys at general availability.

ForAllSecure launched its dynamic Software Bill of Materials (SBOM) solution for application security. The solution provides organizations with a runtime list of software components, prioritizing them based on risk and enabling faster remediation of vulnerabilities.

There are a lot of tactical here, and most you care about for simple solutions to deliver.      I wanted to highlight that SBOM product, as we’ve talked about this before.   This is the first product I’d noted addressing that – and that’s my observation, not a definitive first to market – and I wanted to highlight that.  We’re still talking supply chain management, and here are the tools for it.