Adam Shostack

AUGUST 21, 2019

If you needed more reasons to move away from using SMS-based authentication, and treating phone companies as trusted, “ AT&T employees took over $1 million in bribes to plant malware and unlock millions of smartphones: DOJ “ Abuse reporting systems are being abused. You need to threat model and play the chess game.

Media 113

Media Authentication Malware Personal Security 113

Cisco Security

JUNE 30, 2022

Mobility, BYOD (bring your own device), cloud, increased collaboration, and the consumerization of IT have necessitated a new type of access control security– zero trust security. Supply chain attacks have become one of the biggest security worries for businesses. Data privacy is getting personal .

Digital transformation 129

Digital transformation Data privacy Identity Theft Data breaches 129

Duo's Security Blog

JUNE 23, 2021

In early 2019, we embarked on a project to improve the Duo Mobile user authentication experience. Before we do that, I wanted to take some time to share with you exactly how we’re making it easier for users to authenticate using Duo Mobile. Fighting Fraud by Humanizing the Push Screen Authentication is hard!

Mobile 76

Mobile Accountability Authentication Education 76

Security Through Education

DECEMBER 21, 2022

In October, Cybersecurity Awareness Month taught us the importance of safe practices such as the use of multifactor authentication, strong passwords, and VPNs. Only through learning about the tactic’s scammers use can we truly continue to improve our own personal security.

Scams 59

Scams Phishing Social Engineering Risk 59

Troy Hunt

JANUARY 8, 2019

Instead, they need to look inwardly and adjust their own security practices instead. Get a password manager (8 years on and I still use 1Password every day), create strong and unique passwords on every account and enable 2-factor authentication where available.

Hacking 223

Hacking Passwords Accountability Data breaches 223

Krebs on Security

DECEMBER 16, 2021

Unauthorized SIM swaps often are perpetrated by fraudsters who have already stolen or phished a target’s password, as many financial institutions and online services rely on text messages to send users a one-time code for multi-factor authentication.

Cryptocurrency 347

Cryptocurrency Mobile Accountability Scams 347

The Last Watchdog

NOVEMBER 22, 2021

Two-factor authentication may seem technically complicated, but “2FA” is a security measure you already know. Anytime a website sends you an SMS code or asks a personal security question, that’s a form of 2FA. Silo your risk by generating a unique password for each of your online accounts.

Passwords 244

Passwords Password Management Accountability Data breaches 244

Cisco Security

NOVEMBER 4, 2022

An important lesson in security is that operating at max capacity isn’t sustainable all the time, and planning for rest and overflow in our personal security planning is no different.

Accountability 100

Accountability Marketing B2B Media 100

Troy Hunt

JANUARY 16, 2019

As I mentioned earlier, they partnered with HIBP to help drive people interested in personal security towards better personal security practices and obviously there's some neat integration with the data in HIBP too (there's also a dedicated page explaining why I chose them ). What can you do if you were in the data?

Data breaches 280

Data breaches Passwords Password Management Accountability 280

Schneier on Security

JULY 20, 2020

Class breaks are endemic to computerized systems, and they're not something that we as users can defend against with better personal security. It didn't matter whether individual accounts had a complicated and hard-to-remember password, or two-factor authentication. For Twitter users, this attack was a double whammy.

Hacking 311

Hacking Banking Accountability Government 311