The Security Ledger

FEBRUARY 26, 2019

In this week’s episode (#135): we continue our series on the future of Passwords as we are joined by Guemmy Kim, a group product manager at Google in charge of that company’s account security initiatives. ?. Guemmy and I talk about Google’s fast evolving security program to protect user passwords and data.

Account Security 40

Account Security Passwords Accountability Phishing 40

CSO Magazine

SEPTEMBER 29, 2021

Two-factor authentication (2FA) has been widely adopted by online services over the past several years and turning it on is probably the best thing users can do for their online account security.

Authentication 136

Authentication Cybercrime Passwords Accountability 136

NetSpi Technical

JANUARY 18, 2024

Time-Based One-Time Password (TOTP) Time-Based One-Time Password (TOTP) is a common two-factor authentication (2FA) mechanism used across the internet. During authentication, the secret is used in combination with the time in a cryptographic hash function to produce a secure 6-digit passcode. Why yes, it did.

Authentication 109

Authentication Passwords Accountability Penetration Testing 109

Security Affairs

JANUARY 2, 2020

The Poloniex cryptocurrency exchange is forcing users to reset their passwords following a data leak. . Another bad news for the community of the virtual currencies communities, the Poloniex cryptocurrency exchange has forced its users to reset their passwords following a data leak. . This is a real email! Pierluigi Paganini.

Passwords 67

Passwords Cryptocurrency Data breaches Advertising 67

Malwarebytes

SEPTEMBER 7, 2023

The accounts, Microsoft says, were accessed using forged authentication tokens: Microsoft investigations determined that Storm-0558 gained access to customer email accounts using Outlook Web Access in Exchange Online (OWA) and Outlook.com by forging authentication tokens to access user email.

Authentication 134

Authentication Accountability Government Passwords 134

Malwarebytes

DECEMBER 14, 2023

Apple said it will share additional information about Stolen Device Protection soon, to clarify how the feature works.

Passwords 119

Passwords Account Security Authentication Accountability 119

SecureWorld News

AUGUST 5, 2023

Multi-factor authentication (MFA) is a fundamental component of best practices for account security. It is a universal method employed for both personal and corporate user accounts globally. By understanding hackers' common techniques to circumvent MFA, you can better safeguard your account against their potential ploys.

Social Engineering 78

Social Engineering Authentication Passwords Accountability 78

CyberSecurity Insiders

APRIL 29, 2021

The law enforcement agency of America is urging its users to change their email password, and any authentication related security question if they want to keep their email accounts secured from Emotet gang’s malicious intentions.

Malware 141

Malware Authentication Passwords Data breaches 141

Malwarebytes

JANUARY 10, 2024

With this control they can intercept messages, two-factor authentication (2FA) codes, and eventually reset passwords of the account the number has control over. Although apparently the SEC did not have 2FA enabled for its X account! X offers other options like an authentication app and a security key.

Accountability 89

Accountability Scams Hacking Cryptocurrency 89

Approachable Cyber Threats

JANUARY 24, 2022

What is Multi-factor Authentication (MFA)?” Today, many people when they sign up for a new account for an internet-based service are asked to pick a password to help secure their account from unauthorized access. A password is considered “something you know”, a secret more or less that shouldn’t be shared.

Authentication 98

Authentication Passwords Accountability Mobile 98

Security Boulevard

OCTOBER 22, 2021

Credential stuffing is a common type of account takeover attack and provides the required fuel — valid username-password combinations — to successfully compromise user accounts. It’s time for account security vendors to set a new […].

Accountability 67

Accountability Account Security Authentication Passwords 67

Security Affairs

NOVEMBER 24, 2020

Researchers discovered a major issue in cPanel that could be exploited by attackers to bypass two-factor authentication for cPanel accounts. Security researchers from Digital Defense have discovered a major security issue in cPanel , a popular software suite that facilitates the management of a web hosting server.

Hacking 137

Hacking Authentication Accountability Software 137

Approachable Cyber Threats

SEPTEMBER 24, 2022

Phishing and poor password practices. Once they were in that employee’s account, they accessed Outlook emails, Teams chats, and server directories before locating the password to IHG’s internal password vault - “Qwerty1234” - which was apparently available to more than 200,000 employees.

Social Engineering 105

Social Engineering Authentication Engineering Phishing 105

Malwarebytes

OCTOBER 7, 2021

2SV adds an extra layer when logging into your account and the additional step happens after you’ve entered your password. It’s simple, and it dramatically decreases the chance of someone else accessing an account. For Google users, it involves just tapping a notification on their phone to confirm it’s them.

Passwords 107

Passwords Accountability Authentication Mobile 107

Schneier on Security

DECEMBER 4, 2018

Add multifactor verifications to ALL online accounts offering this additional layer of protection, including mobile and cable accounts. Note: Have the codes sent to your email, as SIM card "swapping" is becoming a huge, and thus far unstoppable, security problem.). Create hard-to-crack 12-character passwords.

VPN 237

VPN Passwords Accountability Mobile 237

Identity IQ

JULY 3, 2023

Unusual login attempts One of the most apparent signs of account misuse is failed login attempts or password reset notifications. Receiving notifications or text messages for failed login attempts that you didn’t initiate could mean someone is trying to gain unauthorized access to your account.

Accountability 52

Accountability Identity Theft Passwords Social Engineering 52

SecureWorld News

MAY 26, 2022

Federal Trade Commission (FTC) and the Department of Justice (DOJ) charged Twitter with a $150 million penalty for " deceptively using account security data for targeted advertising.". Twitter, like many other social media websites, asks users to provide their phone number and email address to better protect their account.

Advertising 88

Advertising Media Accountability Account Security 88

Google Security

MAY 11, 2022

Posted by Daniel Margolis, Software Engineer, Google Account Security Team Every year, security technologies improve: browsers get better , encryption becomes ubiquitous on the Web , authentication becomes stronger. As phishing adoption has grown, multi-factor authentication has become a particular focus for attackers.

Phishing 102

Phishing Scams Authentication Accountability 102

Hot for Security

FEBRUARY 26, 2021

The latest guide addresses the use of second-hand devices, video conferencing tools and online account security. This may include passwords, browsing history, photos, documents and Wi-Fi codes. Enabling two-factor authentication. Factory reset for previously owned devices ­.

Education 118

Education Accountability Authentication Passwords 118

Krebs on Security

SEPTEMBER 22, 2023

The password manager service LastPass is now forcing some of its users to pick longer master passwords. LastPass says the changes are needed to ensure all customers are protected by their latest security improvements. Nor was he ever forced to improve his master password. And very recently, it upped that again to 600,000.

Passwords 248

Passwords Encryption Password Management Cryptocurrency 248

Security Affairs

JANUARY 4, 2024

I have fixed your RIPE admin account security. “We encourage account holders to please update their passwords and enable multi-factor authentication for their accounts. If you suspect that your account might be impacted, please report it to security@ripe.net.”

Internet 118

Internet Internet Accountability Passwords 118

Security Affairs

JULY 18, 2021

Good news for the owners of Instagram accounts that may have been compromised, the company launched a new feature named ‘ Security Checkup ‘ feature that aims to keep accounts safe and help users to recover them. Instagram also recommends users enable two-factor authentication to protect their accounts.

Accountability 101

Accountability Authentication Scams Hacking 101

The Security Ledger

JUNE 19, 2019

In this week’s episode, #150: Microsoft cloud evangelist Tanya Janca joins us to talk about securing Azure and the challenges of pushing security left. In this week’s episode, #150: Microsoft cloud evangelist Tanya Janca joins us to talk about securing Azure and the challenges of pushing security left. Secure and Azure.

Passwords 40

Passwords Technology Authentication Internet 40

The Security Ledger

JUNE 19, 2019

In this week’s episode, #150: Microsoft cloud evangelist Tanya Janca joins us to talk about securing Azure and the challenges of pushing security left. In this week’s episode, #150: Microsoft cloud evangelist Tanya Janca joins us to talk about securing Azure and the challenges of pushing security left. Secure and Azure.

Passwords 40

Passwords Technology Authentication Internet 40

Malwarebytes

SEPTEMBER 21, 2021

Keep your online accounts secure Respect your privacy Capture and share with care Take care of your data Take care of your device Be wary of certain sites and content online Be kind. Keep your online accounts secure. Show them these tips: Never use the same password twice. This is where a password manager comes in.

Internet 106

Internet Internet Passwords Password Management 106

Malwarebytes

MAY 7, 2021

The Google blog cites the security check-up page, but that simply lists: Devices which are signed in Recent security activity from the last 28 days 2-step verification, in terms of sign-in prompt style, authenticator apps, phone numbers, and backup codes Gmail settings (specifically, emails which you’ve blocked).

Passwords 99

Passwords Password Management Backups Accountability 99

Duo's Security Blog

NOVEMBER 23, 2020

Start with a zero-trust framework that begins at the access request with strong multi-factor authentication (MFA). Duo’s modern access security protects your users and applications by using a second source of validation. Most breaches involve weak, reused, or stolen passwords. How do you protect your users from phishing attacks?

Authentication 74

Authentication Passwords Technology Education 74

The Security Ledger

DECEMBER 29, 2019

We give you seven simple steps to level up your password and account security. A good friend e-mailed me recently with the subject line “security stuff.” Imagining the Future of Authentication. ” I knew what was coming: questions about how to. Read the whole entry. »

Digital transformation 40

Digital transformation Cyber Risk Passwords Risk 40

Approachable Cyber Threats

MARCH 24, 2023

“What are some strategies for securing my accounts?” Use Strong and Unique Passwords Creating strong and unique passwords for each of your social media accounts is crucial. Password managers can help you generate and store secure passwords for all your accounts.

Media 52

Media Accountability Passwords Password Management 52

Approachable Cyber Threats

MARCH 24, 2023

“What are some strategies for securing my accounts?” Use Strong and Unique Passwords Creating strong and unique passwords for each of your social media accounts is crucial. Password managers can help you generate and store secure passwords for all your accounts.

Media 52

Media Accountability Passwords Password Management 52

Security Affairs

APRIL 4, 2022

. ““When we become aware of any unauthorized account access, we notify the account owner and immediately take steps to suspend any further access,” Smyth added. “We We also recommend two-factor authentication and other account security measures for our users as added measures to keep accounts and passwords secure.”

Phishing 124

Phishing Data breaches Cryptocurrency Social Engineering 124

Malwarebytes

FEBRUARY 12, 2021

To gain access to the email accounts, he appears to have reset account passwords by correctly guessing password reset questions. He also used lists of compromised passwords to break into one account, and discussed social engineering tricks related to Snapchat. The more you read, the worse it gets.

Identity Theft 96

Identity Theft Social Engineering Passwords Accountability 96

Identity IQ

MAY 7, 2021

While these individual prices seem low, it’s important to remember that data breaches usually compromise millions of accounts at a time which are then sold in bulk. Given that 52% of people use the same password for multiple accounts, compromising one account can give a criminal access to a vast range of personal data.

Accountability 105

Accountability Data breaches Passwords Social Engineering 105

Krebs on Security

AUGUST 5, 2022

In July’s Experian, You Have Some Explaining to Do , we heard from two different readers who had security freezes on their credit files with Experian and who also recently received notifications from Experian that the email address on their account had been changed. So had their passwords and account PIN and secret questions.

Accountability 267

Accountability Account Security Computers and Electronics Passwords 267

CyberSecurity Insiders

MAY 9, 2023

In today’s digital age, managing passwords has become increasingly complex. With the average internet user having more than 100 passwords to remember, it’s no wonder that people often resort to using weak passwords that are easy to remember or reuse the same passwords across multiple accounts.

Password Management 120

Password Management Passwords Authentication Accountability 120

Hacker Combat

OCTOBER 25, 2021

The malware has the ability to steal passwords and cookies. The stolen cookies were then used to hijack all of the victim’s sessions, thus taking over their YouTube accounts. The account could either be repurposed for future crypto-currency scams or sold on the dark web, and the rate depends on the number of subscribers it has.

Accountability 99

Accountability Malware Scams Antivirus 99

Troy Hunt

NOVEMBER 14, 2018

Last week I wrote a couple of different pieces on passwords, firstly about why we're going to be stuck with them for a long time yet and then secondly, about how we all bear some responsibility for making good password choices. This week, I wanted to focus on going beyond passwords and talk about 2FA. It's a subset of MFA.

Passwords 260

Passwords Authentication Accountability Mobile 260