School cyber-attacks up 55% Year on Year.

[HPlum78]

https://www.scmagazine.com/news/lockbit-ransomware-spread-in-millions-of-emails-via-phorpiex-botnet

 

Speaking of getting this stuff in order.

to be sure you could do a mail trace for the following:

Jenny Green [email protected]

Jenny Brown [email protected]

 

Also could do a compliance search (subject) for:

"your document"

"photo of you???"

 

Hope that's useful.

[Michael]

I have found a small issue with NCSC's DKIM records in the following scenario -

 

- Your DKIM key length is 1024 bit

- You have Arbor CNAME selector records registered in your DNS editor

- You upgrade O365 selector2 to 2048 bit and wait for keys to rotate

- You then upgrade O365 selector1 to 2048 bit

 

The end result, the NCSC portal reads O365 selector1 and one of the Arbor CNAME selector records.

 

I'm hoping when the selector key rotation occurs a second time, the NCSC portal will correct itself to show O365 selector1 and selector2 as before. Anyone else observed this behaviour before?

[free780]

I have found a small issue with NCSC's DKIM records in the following scenario -

 

- Your DKIM key length is 1024 bit

- You have Arbor CNAME selector records registered in your DNS editor

- You upgrade O365 selector2 to 2048 bit and wait for keys to rotate

- You then upgrade O365 selector1 to 2048 bit

 

The end result, the NCSC portal reads O365 selector1 and one of the Arbor CNAME selector records.

 

I'm hoping when the selector key rotation occurs a second time, the NCSC portal will correct itself to show O365 selector1 and selector2 as before. Anyone else observed this behaviour before?

 

I’ve seen revoked DKIM keys when amazonses is in use. But this is by design and expected.

[Edu-IT]

Yes. Been a while since I did it but you can set up a vanity URL for the repo. The settings page walks you through it, I think you have to put a file into DNS to allow it.

Have you been able to enable HTTPS for your custom pages domain? I can't get the tick box to enable.

[andy_b]

Have you been able to enable HTTPS for your custom pages domain? I can't get the tick box to enable.

 

Has the DNS check passed?

[TechMonkey]

Have you been able to enable HTTPS for your custom pages domain? I can't get the tick box to enable.

 

Yep, I remember it being a bit of a palaver. As Andy_b says, wait till the DNS check is clear and it should all work.

[3s-gtech]

My NCSC Dashboard is now all green (other than DMARC Insights). This makes me happy. The instructions given by @Michael are much appreciated.