CSO Magazine

OCTOBER 5, 2021

He wanted to leak an SSH username and password into a GitHub repository and see if any attacker might find it. The biggest eye-opener for me was how quickly it was exploited," he tells CSO. Get the latest from CSO by signing up for our newsletters. ] Get the latest from CSO by signing up for our newsletters. ]

CSO 126

CSO Data breaches Passwords 126

CSO Magazine

JULY 28, 2021

More applications and devices are using password repositories to check on password reuse. When you log into your iPhone for example, it now alerts you that passwords you saved in your iCloud keychain may have been reused in other places. To read this article in full, please click here (Insider Story)

Passwords 131

Passwords 131

CSO Magazine

JUNE 17, 2021

Check out the password hall of shame (and 10 tips for better password security) | Get the latest from CSO by signing up for our newsletters. ] To read this article in full, please click here

CSO 133

CSO Passwords Authentication Accountability 133

CSO Magazine

MAY 27, 2021

Credential stuffing is the automated use of collected usernames and passwords to gain fraudulent access to user accounts. Credential stuffing attacks are one of the most common ways cybercriminals abuse stolen usernames and passwords. Check out the password hall of shame (and 10 tips for better password security). |

CSO 119

CSO Passwords Data breaches Accountability 119

CSO Magazine

OCTOBER 19, 2021

All these attacks key on traditional credentials, usernames and passwords, which are past their expiration date as a legitimate security measure. Get the latest from CSO by signing up for our newsletters. ] An obvious way forward in enhancing access security is multifactor authentication (MFA).

Authentication 130

Authentication CSO Social Engineering Engineering 130

CSO Magazine

JUNE 8, 2023

BastionZero has announced the release of SplitCert to provide password-free authentication access to databases. It uses Mutual TLS (mTLS) and cryptographic multi-party computation (MPC) to provide certificate-based authentication for popular, self-hosted Postgres and MongoDB databases, according to the vendor.

Authentication 75

Authentication Passwords 75

CSO Magazine

AUGUST 26, 2022

LastPass, maker of a popular password management application, revealed Thursday that an unauthorized party gained access to its development environment through a compromised developer account and stole some source code and proprietary technical information. To read this article in full, please click here

Password Management 79

Password Management Passwords Architecture Encryption 79

Security Boulevard

NOVEMBER 24, 2022

How to reset a Kerberos password and get ahead of coming updates. Do you recall when you last reset your Kerberos password? Hopefully that was not the last time I suggested you change it, back in April of 2021, when I urged you to do a regular reset of the KRBTGT account password. Leer más CSO Online.

Passwords 52

Passwords CSO Authentication Accountability 52

CSO Magazine

JANUARY 13, 2022

Credential stuffing is a cyberattack in which exposed usernames and passwords are used to gain fraudulent access to user accounts through large-scale, automated login requests. Attackers are asking: What does it look like to make a legitimate request? How can we emulate that?

CSO 130

CSO Data breaches Passwords Accountability 130

SecureBlitz

JUNE 27, 2023

Traditional authentication techniques, such as passwords and PINs, are no longer enough to safeguard against sophisticated assaults. CSO Online recently reported a […] The post The Rise of Advanced Authentication: Strengthening Digital Defense appeared first on SecureBlitz Cybersecurity.

Authentication 71

Authentication CSO Passwords Cybersecurity 71

CSO Magazine

OCTOBER 20, 2022

Distributing malware inside password-protected archives has long been one of the main techniques used by attackers to bypass email security filters. More recently, researchers have spotted a variation that uses nested self-extracting archives that no longer require victims to input the password.

Passwords 96

Passwords Malware 96

CSO Magazine

SEPTEMBER 1, 2021

Use of known/fixed/default passwords and credentials. Get the latest from CSO by signing up for our newsletters. ] They are so broad in their “badness,” however, that any organization should take notice and ensure they are not doing them. The two bad practices are: Use of unsupported (or end-of-life) software.

CSO 127

CSO Risk Architecture Passwords 127

CSO Magazine

MARCH 28, 2023

Authentication-related attacks grew in 2022, taking advantage of outdated, password-based authentication systems, according to a study commissioned by HYPR, a passwordless multifactor authentication (MFA) provider based in the US.

Authentication 109

Authentication Passwords Marketing Phishing 109

CSO Magazine

FEBRUARY 7, 2022

For example, instead of trying to find a software vulnerability, a social engineer might call an employee and pose as an IT support person, trying to trick the employee into divulging his password. Get the latest from CSO by signing up for our newsletters. ] Learn what makes these 6 social engineering techniques so effective. |

Social Engineering 98

Social Engineering Engineering CSO Passwords 98

CSO Magazine

APRIL 13, 2022

In his career, he has seen people pick up and use dropped thumb drives, give up passwords over the phone and, yes, even click on simulated phishing links. Sign up for CSO newsletters. ]. He has also seen the real-world consequences of such actions.

Penetration Testing 95

Penetration Testing CSO Phishing Passwords 95

CSO Magazine

SEPTEMBER 20, 2021

Cyberespionage groups are exploiting a critical vulnerability patched earlier this month in ManageEngine ADSelfService Plus, a self-service password management and single sign-on (SSO) solution for Active Directory environments. Sign up for CSO newsletters. ]. Sign up for CSO newsletters. ].

CSO 113

CSO Password Management Passwords Software 113

CSO Magazine

NOVEMBER 23, 2022

Do you recall when you last reset your Kerberos password? Hopefully that was not the last time I suggested you change it, back in April of 2021, when I urged you to do a regular reset of the KRBTGT account password.

Passwords 73

Passwords Authentication Accountability 73

CSO Magazine

APRIL 14, 2021

Until then, you can take steps to protect your networks better, starting with handling passwords better in your domain. The concept of zero trust is that nothing should be trusted by default. Most of us are trying to work our way to zero trust but are not there yet.

Passwords 98

Passwords 98

CSO Magazine

MARCH 30, 2022

Authentication continues to test CISOs for several reasons, with its modern definition being the first to address, Netskope CISO Lamont Orange tells CSO. “We Authentication a significant obstacle for modern CISOs. To read this article in full, please click here

Authentication 107

Authentication CISO CSO Passwords 107

The Security Ledger

SEPTEMBER 25, 2018

SAP CSO Justin Somaini. For consumers, that means boning up on account security – maybe getting a password manager. Somaini has the distinction of being the first CSO at Yahoo and also at Symantec. October is Cybersecurity awareness month. But what if you’re the Chief Security Officer of an $128 billion global corporation?

CSO 40

CSO Hacking Security Awareness Password Management 40

CSO Magazine

FEBRUARY 1, 2021

The FIDO (fast identity online) Alliance is an industry association that aims to reduce reliance on passwords for security, complementing or replacing them with strong authentication based on public-key cryptography.

Passwords 97

Passwords Authentication 97

CSO Magazine

APRIL 7, 2021

Most large enterprises regularly change their Kerberos passwords. If the KRBTGT account password hash is stolen or broken with an attack, the attackers can then grant themselves full access to your network with the necessary authentication. When an attacker wiggles into a network, they can use the golden ticket attack sequence.

Passwords 90

Passwords Accountability Authentication 90

CSO Magazine

JUNE 2, 2022

If, after initial authentication, you never authenticate again, a bad actor could potentially run rampant in your system," he tells CSO. The days of granting blanket trust after initial authentication are over, says SecureAuth CEO Paul Trulove. "If,

Authentication 91

Authentication Artificial Intelligence CSO Passwords 91

CSO Magazine

SEPTEMBER 1, 2022

Password management vendor Dashlane has announced the introduction of integrated passkey support in its password manager, unveiling an in-browser passkey solution to help tackle the issue of stolen/misused passwords. Passkey support includes secure sharing, access control, multi-device sync capabilities.

Password Management 66

Password Management Passwords Authentication 66

SC Magazine

JUNE 18, 2021

In a notice released to its customers, Wegmans said the type of customer information included names, addresses, phone numbers, birth dates, Shoppers Club numbers, and email addresses and passwords for access to Wegmans.com accounts. Tracy said companies really need to understand the shared security model of the cloud providers.

CSO 107

CSO Passwords Authentication Accountability 107

Duo's Security Blog

NOVEMBER 20, 2023

“It took nearly 11 months (328 days) to identity and contain data breaches resulting from stolen or compromised credentials.” – IBM’s Cost of Data Breach Report 2023 I recently came across a 2012 article from CSO Online , and realized that it has been more than 11 years since the phrase “Identity is the new perimeter” was coined!

Threat Detection 134

Threat Detection Authentication Accountability Data breaches 134

CSO Magazine

SEPTEMBER 30, 2021

CISOs looking to beef up their customer-facing authentication procedures to thwart cyberattacks need to walk a fine line. You want the method to provide tight security without being too complicated, confusing, or onerous for end users.

Authentication 128

Authentication Passwords Retail CISO 128

The Security Ledger

JULY 11, 2021

economy, according to Dr. Alissa Abdullah, Deputy CSO at MasterCard. Poor cyber literacy is at the root of many of the cybersecurity problems plaguing the U.S. The post At Pride Summit: A Warning On Cyber Literacy appeared first on The Security Ledger with Paul F.

CSO 52

CSO Cyber Risk Ransomware Risk 52

SecureWorld News

MARCH 10, 2021

He also says that it is very important to note that this issue was not the result of compromised account passwords, SSH keys, or personal access tokens (PATs). GitHub CSO Mike Hanley takes security seriously. Mike Hanley was hired as GitHub's new CSO in February 2021.

Authentication 76

Authentication CSO Accountability Engineering 76

CyberSecurity Insiders

MAY 16, 2022

By Amanda Fennell, CSO and CIO, Relativity. While exploring phishing examples and best tools to manage passwords, offer to dive into how tools actually work. Think about password management. The average person, in their personal and professional life, may be managing as many as 200 application accounts, each with a password.

CSO 131

CSO Passwords Password Management Accountability 131

CSO Magazine

JANUARY 4, 2023

Every business needs a secure way to collect, manage, and authenticate passwords. Storing passwords in the browser and sending one-time access codes by SMS or authenticator apps can be bypassed by phishing. Unfortunately, no method is foolproof. To read this article in full, please click here

Authentication 129

Authentication Password Management Backups Passwords 129

Security Affairs

DECEMBER 21, 2022

“Upon investigation, we have concluded that such access was used to copy Okta code repositories,” writes David Bradbury, the Okta Chief Security Officer (CSO) in the mail. The Lapsus$ extortion group compromised the laptop of one of its support engineers that allowed them to reset passwords for some of its customers.

Hacking 97

Hacking CSO Data breaches Engineering 97

CSO Magazine

NOVEMBER 2, 2022

Passwords have always been a pain point in securing computing infrastructure. Complexity and length are key components of a strong password, but both make it inherently difficult for a human to remember.

Passwords 119

Passwords Marketing 119

The Last Watchdog

DECEMBER 14, 2023

Instead of arguing about MFA strength, VPN vendor, or nation-state treat actors, let’s finish our conversation about using dedicated administrator accounts and unique passwords. Richard Bird , CSO, Traceable AI Bird The bad guys are showing no restraint in exploiting API security weakness to their advantage.

Cybersecurity 235

Cybersecurity Risk Cyber threats CSO 235

CSO Magazine

JANUARY 24, 2023

Passwords are a central aspect of security infrastructure and practice, but they are also a principal weakness involved in 81% of all hacking breaches. Inherent useability problems make passwords difficult for users to manage safely. Passkeys represent a more secure foundation for enterprise security.

Authentication 109

Authentication Passwords Hacking 109

Duo's Security Blog

JULY 13, 2021

Cisco Secure is sponsoring the event — look for our goodbye to passwords video, or if you’re interested in careers at Cisco/Duo, stop into the #job-postings Discord channel to see what roles are open. With so much to look forward to, we can’t wait for Black Hat to begin.

CISO 89

CISO CSO Authentication Passwords 89

CSO Magazine

MAY 3, 2023

Google has begun rolling out support for passkeys across Google Accounts on all major platforms, adding a new sign-in option that can be used alongside passwords and two-step verification. The tech giant announced passkey availability on the eve of World Password Day as it looks to introduce more secure, reliable sign-in options.

Accountability 105

Accountability Passwords 105