SC Magazine

MARCH 2, 2021

House Oversight and Homeland Security committees last week, SolarWinds’s former and current CEOs blamed an intern for creating a weak FTP server password and leaking it on GitHub – an act which may or may not have contributed to a supply chain hack that impacted users of the tech firm’s Orion IT performance monitoring platform.

Passwords 129

Passwords Password Management CISO InfoSec 129

CyberSecurity Insiders

APRIL 8, 2022

In honor of the day coming up on April 12, I spoke to the below industry experts on how both individuals and organizations can strengthen identity management all year round. Those steps can become overwhelming for small businesses with staff shortages, small budgets or limited time.

Small Business 118

Small Business InfoSec Password Management Data breaches 118

Thales Cloud Protection & Licensing

OCTOBER 24, 2019

Per Symantec , they should specifically require passwords that contain at least 16 characters comprised of upper- and lowercase letters, numbers and symbols. Infosec personnel should also help employees store those passwords safely such as via the use of a password manager. Implement Multi-Factor Authentication.

Security Awareness 83

Security Awareness InfoSec Passwords Accountability 83

CyberSecurity Insiders

APRIL 21, 2021

Multi-factor authentication is great for security, but can still be a chore for the average person to use. In some cases, people will choose weak passwords, relying on the security of the multi-factor process as the extra safety mechanism. The InfoSec Perspective. Here To Stay.

Passwords 89

Passwords Information Security Engineering Authentication 89

Troy Hunt

JANUARY 10, 2018

But getting onto the title of this section, the page in question is the E-Aadhaar authentication page (also geo-blocked). This is poor form as it can break tools that encourage good security practices such as password managers.

Hacking 279

Hacking Government Encryption Risk 279

Troy Hunt

FEBRUARY 11, 2019

Incidentally, Lorenzo who wrote that Motherboard piece is a top-notch infosec journo I've worked with many times before and he reported accurately in that piece.) Of course, there was nothing missing from the post and each time I asked the question it was met with silence.

Passwords 234

Passwords Data breaches Media InfoSec 234

The Security Ledger

MAY 8, 2019

Also: we continue our series on life after the password by speaking to Ian Paterson, the CEO of behavioral authentication vendor Plurilock. Also: we continue our series on life after the password by speaking to Ian Paterson, the CEO of behavioral authentication vendor Plurilock.

Passwords 40

Passwords Password Management Authentication InfoSec 40

Digital Shadows

OCTOBER 23, 2024

Figure 3: Scattered Spider attack timeline Social Engineering: Fool Me Once, Fool Me Twice To gain initial access to the target network, the threat actor called the organization’s IT help desk and persuaded staff to reset the CFO’s account password. This isn’t the first time we’ve seen Scattered Spider target password managers.

Social Engineering 122

Social Engineering Engineering Accountability Backups 122

Security Through Education

JANUARY 18, 2023

The Cybersecurity & Infrastructure Security Agency , lists the following 4 steps to protect yourself: Implement multi-factor authentication on your accounts and make it significantly less likely you’ll get hacked. Use strong passwords, and ideally a password manager to generate and store unique passwords.

Cybersecurity 98

Cybersecurity Social Engineering Scams IoT 98

Digital Shadows

OCTOBER 23, 2024

Figure 3: Scattered Spider attack timeline Social Engineering: Fool Me Once, Fool Me Twice To gain initial access to the target network, the threat actor called the organization’s IT help desk and persuaded staff to reset the CFO’s account password. This isn’t the first time we’ve seen Scattered Spider target password managers.

Social Engineering 52

Social Engineering Engineering Accountability Backups 52

eSecurity Planet

DECEMBER 3, 2021

How to screen for natural infosec talent: Ask for a worst case scenario for any common situation. Street is an industry-respected speaker and analyst and currently is the VP of InfoSec for SphereNY. Markstedter actively contributes to filling the infosec education gap. — Jack Daniel (@jack_daniel) October 10, 2018.

Accountability 139

Accountability Cybersecurity Penetration Testing InfoSec 139

Troy Hunt

DECEMBER 10, 2019

. — Martin Boissonneault (@ve2mrx) December 9, 2019 For me, the issue isn't really about the storage and delivery of the password, it's about the practice of generating a password for someone that just doesn't add up. Password manager? Then you have a strong password generator already. No password manager?

Passwords 200

Passwords Password Management Accountability Authentication 200