Troy Hunt

SEPTEMBER 11, 2018

So I wrote a blog post. Shortly after that blog post, three things happened and the first was that it got press. And now we have another perfect example of precisely the sort of response that needs to be shamed so NatWest earned themselves a blog post. Käthe — T-Mobile Austria (@tmobileat) April 6, 2018.

Media 260

Media Accountability Passwords Mobile 260

Approachable Cyber Threats

DECEMBER 28, 2020

The Top Cybersecurity Blogs We're Reading in 2020. Here’s a collection of our favorite cybersecurity blogs and websites from the industry's foremost thought leaders and reporters. #9. You need to keep your information safe, but you need an easier way to manage all of your complex and unique passwords. Massive U.S.

Passwords 98

Passwords DDOS Healthcare Scams 98

Identity IQ

JULY 17, 2023

In this blog, we provide you with ten actionable ways to safeguard your digital identity, focusing specifically on how to prevent compromised credentials. These backup codes can be used to regain access to your accounts in case you lose your mobile device or it gets reset. How Can Your Credentials Become Compromised?

Identity Theft 52

Identity Theft Password Management Passwords Authentication 52

Identity IQ

JULY 17, 2023

In this blog, we provide you with ten actionable ways to safeguard your digital identity, focusing specifically on how to prevent compromised credentials. These backup codes can be used to regain access to your accounts in case you lose your mobile device or it gets reset. How Can Your Credentials Become Compromised?

Identity Theft 52

Identity Theft Password Management Passwords Authentication 52

Cisco Security

OCTOBER 19, 2022

For a great explanation of why longer passwords work better than shorter, multi-character type passwords, check out this excellent XKCD strip : . A password manager will make this process much easier, as most have the ability to generate unique passwords and allow you to tailor their length and complexity.

Passwords 106

Passwords Authentication Accountability Password Management 106

NetSpi Executives

OCTOBER 24, 2023

Use Strong Passwords and a Password Manager In 2022, threat actors leaked more than 721 million passwords. Among the passwords exposed, 72 percent of users were found to be still using already-compromised passwords. Turn on Multifactor Authentication Even strong, secure passwords can be exposed by attackers.

Social Engineering 59

Social Engineering Engineering Cybersecurity Passwords 59

Malwarebytes

FEBRUARY 20, 2023

From the above linked Twitter blog post: While historically a popular form of 2FA, unfortunately we have seen phone-number based 2FA be used - and abused - by bad actors. As Twitter is so mobile-centric and likely already has your mobile number, SMS 2FA is for many people a natural fit for the platform. Out of those, 74.4%

Authentication 96

Authentication Phishing Mobile Accountability 96

SC Magazine

MAY 7, 2021

Google made the announcement on World Password Day , in which Mark Risher, Google’s director of product management, identity and user security, pointed out in a blog that 66% of Americans admit to using the same password across multiple sites, which makes all those accounts vulnerable if any one fails. “We

Authentication 89

Authentication Passwords Password Management Mobile 89

Duo's Security Blog

MAY 23, 2023

The answer, like most other cybersecurity-adjacent answers, lies in a combination of factors including social engineering , weak passwords, and other risky security moves or attacks. User-generated passwords can be deceptively weak, with less caution given to password management as remote and hybrid work become more common.

Authentication 118

Authentication Passwords Data breaches Phishing 118

The Last Watchdog

OCTOBER 24, 2022

Changing passwords regularly will make the lives of cyberbullies much harder. The best practice is to change passwords every 90 days. You can even use password managers to automatically create strong passwords for you. It also ensures that your account credentials won’t be used for as long.

Passwords 215

Passwords Security Awareness Data breaches Cybersecurity 215

Thales Cloud Protection & Licensing

OCTOBER 25, 2023

Vishing “While email may still be the most common mechanism for social engineering, we increasingly see attacks via social media, platforms such as WhatsApp, physical compromise, snail mail, and phone calls,” says ethical hacker FC in a blog. Most people are familiar with the term phishing, but not everyone knows about vishing.

Social Engineering 83

Social Engineering Phishing Engineering Scams 83

Google Security

OCTOBER 12, 2022

In this post we cover details on how passkeys stored in the Google Password Manager are kept secure. See our post on the Android Developers Blog for a more general overview. Passkeys are a safer and more secure alternative to passwords. A single passkey identifies a particular user account on some online service.

Password Management 86

Password Management Passwords Encryption Backups 86

Duo's Security Blog

OCTOBER 18, 2022

By this point, we’re all familiar with the list of requirements for a strong password: unique, long, memorable, free from any personal information… But even the strongest passwords can pose a risk if they’re the only thing standing between your users and enterprise content.

Insurance 57

Insurance Passwords Cyber Insurance Authentication 57

SC Magazine

MAY 12, 2021

In a blog, Sophos researchers explain how the attackers – which the researchers believe could all be operated by the same group – used social engineering, counterfeit websites, including a fake iOS App Store download page, and an iOS app-testing website to distribute the fake apps to their victims. Do not make it easy for them.

Scams 62

Scams Cryptocurrency Social Engineering Banking 62

Security Affairs

SEPTEMBER 22, 2019

Hi folk, let me inform you that I suspended the newsletter service, anyway I’ll continue to provide you a list of published posts every week through the blog. A flaw in LastPass password manager leaks credentials from previous site. Magecart attackers target mobile users of hotel chain booking websites.

Adware 54

Adware Password Management Advertising Hacking 54

Krebs on Security

DECEMBER 4, 2018

More importantly, the Citrix spokesperson said the company did not enforce a password reset on accounts that were using multi-factor authentication. And I hope it goes without saying, but please don’t re-use a password you used anywhere else. ET: Citrix just published its own blog post about this here. Update: 4:53 p.m.

Passwords 211

Passwords Authentication Accountability Password Management 211

McAfee

JANUARY 28, 2020

But a good way to think of it is this: Many passwords, one breach. One password…. If you’re concerned about being able to remember them, look into obtaining a password manager. Think twice about mobile apps and their data collection. Many cloud services have a mobile app as a way to access their service.

Passwords 71

Passwords Mobile Identity Theft VPN 71

Webroot

JUNE 2, 2022

It will keep your system safe from all types of malware threats—and includes access to LastPass®, a reliable and easy-to-use password management tool. The post Cyber threats in gaming—and 3 tips for staying safe appeared first on Webroot Blog.

Cyber threats 99

Cyber threats Social Engineering Accountability Malware 99

Malwarebytes

SEPTEMBER 21, 2021

And if your child uses the same password across multiple accounts, when one gets breached they are all vulnerable. This is where a password manager comes in. Not only can it create lengthy and complex passwords, it remembers them all for you. Your password manager can help with this.

Internet 114

Internet Internet Passwords Password Management 114

Duo's Security Blog

MAY 4, 2023

So even passwords that are created by humans that are slightly different, still tend to be pretty easy to crack. See the video at the blog post. Passwordless is this next paradigm in authentication where we don’t have to rely on human-created passwords and credentials. See the video at the blog post.

Passwords 83

Passwords Authentication DNS Technology 83

The Last Watchdog

MAY 11, 2020

Related: How the Middle East has advanced mobile security regulations Over the past couple of decades, meaningful initiatives to improve online privacy and security, for both companies and consumers, incrementally gained traction in the tech sector and among key regulatory agencies across Europe, the Middle East and North America.

Computers and Electronics 114

Computers and Electronics Data privacy Encryption Media 114

The Last Watchdog

NOVEMBER 9, 2020

Too often we see companies with strong security policies and tools to protect employee corporate-owned endpoints lacking any security oversite for IoT and mobile devices,” Chris Sherman, senior industry analyst at Forrester told me. This column originally appeared on Avast Blog.).

IoT 280

IoT Healthcare Internet Internet 280

Google Security

MAY 11, 2022

This blog will deep dive into the method of phishing and how it has evolved today. Password managers that can validate the identity of the web page before logging in. Instead, to make this level of security more accessible, we're building it into mobile phones.

Phishing 107

Phishing Scams Authentication Accountability 107

Identity IQ

JULY 3, 2023

In this blog, we share guidance on how to detect and respond to account misuse so you can mitigate the risks associated with it. Consider performing a thorough password reset across all your accounts As a precautionary measure, consider resetting passwords for all your online accounts.

Accountability 52

Accountability Identity Theft Passwords Social Engineering 52

Krebs on Security

SEPTEMBER 5, 2023

In November 2022, the password manager service LastPass disclosed a breach in which hackers stole password vaults containing both encrypted and plaintext data for more than 25 million users. Monahan said virtually all of the victims she has assisted were longtime cryptocurrency investors, and security-minded individuals.

Cryptocurrency 347

Cryptocurrency Passwords Encryption Accountability 347

Thales Cloud Protection & Licensing

OCTOBER 24, 2019

Help telecommuting employees : Given the rise of mobile and the cloud, organizations would do themselves a great disservice if they exclude telecommuting employees from their security training programs. Infosec personnel should also help employees store those passwords safely such as via the use of a password manager.

Security Awareness 83

Security Awareness InfoSec Passwords Accountability 83

The Last Watchdog

JANUARY 31, 2022

In other words, dynamic passwords are changeable static passwords. Dynamic passwords need to be securely managed. Online and offline password managers come into play here. However, password managers introduce the problem of risk concentration, or putting all of one’s eggs in a single basket.

Passwords 233

Passwords Computers and Electronics Password Management Artificial Intelligence 233

Zigrin Security

OCTOBER 11, 2023

For a detailed threat actor description do not forget to check out our blog article about selecting between black-box, white-box, and grey-box penetration tests and also you would know which pentest you need against a specific threat actor. Additionally, consider using a password manager to securely store and manage your passwords.

Cyber threats 52

Cyber threats Penetration Testing Passwords Backups 52

Webroot

MAY 3, 2022

While avoiding duplication of passwords for multiple accounts and enabling two-way authentication can help, using a password manager is another way to help manage all of your account passwords seamlessly. LastPass is the most trusted name in secure password management.

Passwords 117

Passwords Identity Theft Password Management Antivirus 117

Duo's Security Blog

SEPTEMBER 1, 2023

Security Longer passwords with more character options make it harder to decipher or calculate in brute force attacks. But unless users are using a password manager, they often make passwords easy to guess to help remember them. Efficiency Passwords require time to type, often followed by a second authentication factor.

Passwords 102

Passwords Authentication Insurance Cyber Insurance 102

Krebs on Security

FEBRUARY 18, 2019

25, 2019, when security firm CrowdStrike published a blog post listing virtually every Internet address known to be (ab)used by the espionage campaign to date. Woodcock said PCH’s reliance on DNSSEC almost completely blocked that attack, but that it managed to snare email credentials for two employees who were traveling at the time.

DNS 265

DNS Internet Internet Government 265

Duo's Security Blog

SEPTEMBER 4, 2023

These days, users connect to company resources through a variety of endpoints: desktops, laptops, mobile phones, tablets, wearables…the list goes on. And when it comes to managing access for this plethora of devices, password security just isn’t cutting it anymore. That’s where passkeys come in.

Passwords 71

Passwords Authentication Accountability Password Management 71

Troy Hunt

JANUARY 16, 2019

Checking Email Addresses and Passwords in HIBP There'll be a significant number of people that'll land here after receiving a notification from HIBP; about 2.2M Many others, over the years to come, will check their address on the site and land on this blog post when clicking in the breach description for more information.

Data breaches 280

Data breaches Passwords Password Management Accountability 280

SecureList

FEBRUARY 25, 2021

We previously observed the Lazarus group utilizing this cluster when attacking cryptocurrency businesses and a mobile game company. It’s unknown how the attackers were able to obtain the credentials for that account, but it’s possible the credentials were saved in one of the infected system’s browser password managers.

Malware 134

Malware Phishing Passwords Encryption 134

The Last Watchdog

MAY 30, 2023

A good start would be to read Mobilizing the C-Suite: Waging War Against Cyberattacks, written by Frank Riccardi, a former privacy and compliance officer from the healthcare sector. LW: You discuss password management and MFA; how big a bang for the buck is adopting best practices in these areas?

Cloud Migration 188

Cloud Migration Passwords Cybersecurity Cyber threats 188

Duo's Security Blog

MAY 5, 2022

Our passwords are the gatekeepers to our digital lives, from online banking and shopping accounts to social media platforms, a significant portion of our online accessibility is determined by the strength (and memorability) of our passwords.

Passwords 79

Passwords Password Management Authentication Risk 79

Duo's Security Blog

MARCH 24, 2023

See the video at the blog post. What started in 2008 as mobile transactions with your fingerprint later were ratified into specs, such as FIDO and FIDO2. I still have to remember a few dozen passwords. I use a password manager because not everything’s passwordless yet, but that’s really the big win there.

Passwords 83

Passwords Authentication Password Management Technology 83