Mmastodon TechnologyCybersecurity first seen 5 d ago, last 5 d ago, peak #6
NCSC urges 'browse down' to protect admin accounts from phishing
Original: An admin account that also reads email is one spear phish away from handing over the estate. The NCSC's name for the fix
UK's National Cyber Security Centre is promoting a principle called 'browse down': administrators should carry out privileged work only from dedicated high-trust devices, never from the same machine they use to read email. A security researcher highlighted the risk that a single spear-phishing email can compromise a combined admin and mailbox account, handing attackers control of an entire estate. The advice is paired with just-in-time privilege, where elevated rights are granted only when needed.
Why now: Spear phishing remains one of the most common ways attackers seize administrative access, and the NCSC's concise 'browse down' framing gives defenders a memorable fix.
Evidence
- An admin account that also reads email is one spear phish away from handing over the estate. The NCSC's name for the fix is browse down: administer from high-trust devices, never from the machine that reads mail. Pair it with just-in-time privilege, where the right is granted… · adrianhollister@infosec.exchange · 1
API: https://socialmediatrends-api.osmike.com/v1/trends/1215014