August 16, 2021
Via: Help Net SecurityNearly two thirds of employees are using personal passwords to protect corporate data, and vice versa, with even more business leaders concerned about this very issue. Surprisingly, 97% of employees know what constitutes a strong password, yet 53% admit to […]
August 11, 2021
Via: Help Net SecurityOrganizations have become more security conscious over the course of the pandemic, leading them to invest heavily in zero trust, according to a study from identity firm Okta. The report surveyed over 600 global security leaders about their initiatives and […]
July 20, 2021
Via: Help Net SecurityIncognia announced a report which highlights results from their most recent study focusing on authentication and friction at login and the password reset process. The study was conducted to provide banking, financial services, and investing/trading mobile apps with insights on […]
July 20, 2021
Via: Help Net SecurityZscaler released a study examining the state of IoT devices left on corporate networks during a time when businesses were forced to move to a remote working environment. The report analyzed over 575 million device transactions and 300,000 IoT-specific malware […]
May 4, 2021
Via: Help Net SecurityWhile there is awareness of password security best practices, there is still work to be done to put that awareness to full use, a Bitwarden survey reveals. While Americans are more likely to report being affected by a data breach […]
March 5, 2021
Via: Security WeekAt least four such forums have been breached to date, namely Verified in January, Crdclub in February, and Exploit and Maza in March. All are predominantly Russian-language forums and saw their breaches publicly disclosed elsewhere. Intelligence firm Intel 471, which […]
January 13, 2021
Via: CSO OnlineWhat is hashing? Hashing is a cryptographic process that can be used to validate the authenticity and integrity of various types of input. It is widely used in authentication systems to avoid storing plaintext passwords in databases, but is also […]
December 4, 2020
Via: The Hacker NewsThere is no question that attackers are going after your sensitive account data. Passwords have long been a target of those looking to compromise your environment. Why would an attacker take the long, complicated way if they have the keys […]
September 17, 2020
Via: Help Net SecurityApple has released Safari 14, which features many functional improvements, a Privacy Report that shows all the trackers the browser has neutralized, and and does not support Adobe Flash anymore. New features Safari 14 sports a redesign of the tab […]
August 5, 2020
Via: Security AffairsZDNet has reported in exclusive that a list of plaintext usernames and passwords for 900 Pulse Secure VPN enterprise servers, along with IP addresses, has been shared on a Russian-speaking hacker forum. ZDNet has obtained a copy of the list […]
July 9, 2020
Via: Security AffairsA report published by security firm Digital Shadows revealed the availability of more than 15 billion credentials shared on cybercrime marketplaces, paste sites, file sharing services, and code sharing websites. Over the past few years, Digital Shadows added to its […]
Access control, Data loss, Security, Threats & Malware
July 8, 2020
Via: Threat PostFifteen billion usernames and passwords for a range of internet services are currently for sale on underground forums – shedding light on the sheer scope of compromised credentials that are fueling account takeovers on the internet. A report released Wednesday […]
July 7, 2020
Via: Security AffairsOur research uncovered two unsecured databases, with millions of records, belonging to companies that are based in China and provide different types of services. One database belongs to Xiaoxintong, which offers multiple apps and services aimed at elderly care. The […]
June 18, 2020
Via: Computer WeeklyCheck Point has discovered a sophisticated campaign of phishing attacks incorporating household names to gain a foothold on corporate networks and harvest login credentials stored on Microsoft Office 365 accounts. Cyber criminals hijacked an Oxford University email server to bombard […]
May 7, 2020
Via: Help Net SecurityNearly a third (29%) of organizations in Europe and the Middle East still see usernames and passwords as one of the most effective means to protect access to their IT infrastructure, two years after the inventor of the complex static […]
Access control, Security, Threats & Malware, Vulnerabilities
March 25, 2020
Via: Help Net SecurityDespite often repeated advice of using unique passwords for online accounts – or at least the most critical ones – password reuse continues to be rampant. And, according to breach discovery firm SpyCloud, employees of the Fortune 1000 are just […]
February 13, 2020
Via: CSO OnlinePop quiz: What has been the most popular — and therefore least secure — password every year since 2013? If you answered “password,” you’d be close. “Qwerty” is another contender for the dubious distinction, but the champion is the most […]
December 27, 2019
Via: Help Net SecurityPeople rely on usernames and passwords to identify themselves to machines so they can gain access to data and services. Machines also need to authenticate themselves to each other so they can communicate securely, relying on cryptographic keys and digital […]
August 27, 2019
Via: Security WeekWeb hosting provider Hostinger reset all customer passwords over the weekend, after learning that an attacker gained unauthorized access to one of its internal systems. With over 29 million users in 178 countries, Hostinger, which was established in 2004, is […]
July 1, 2019
Via: Hot for SecuritySome of the world’s biggest companies have had 750GB worth of their innermost secrets revealed on unsecured Amazon S3 buckets, available for anybody to download – no password required. The startling revelation came from researchers at UpGuard, who discovered three […]