Security Affairs
NOVEMBER 22, 2022
APIs have unique threat implications that aren’t fully solved by web application firewalls or identity and access management solutions. This includes weak password complexity or poor password hygiene, missing account lockout thresholds, long durations for password or certificate rotations, or relying on API keys alone for authentication.
The Last Watchdog
NOVEMBER 13, 2018
Established web application firewall (WAF) suppliers like Imperva, F5 and Akamai are hustling to strengthen their respective platforms. Stolen usernames and passwords are loaded up on botnets, which then relentlessly test them on account logon pages. Botnets can test stolen usernames and passwords at scale.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Security Affairs
OCTOBER 5, 2023
Researcher discovered that global B2B CRM provider Really Simple Systems exposed online a non-password-protected database with million records. Cybersecurity Researcher, Jeremiah Fowler, discovered and reported to vpnMentor about a non-password protected database that contained over 3 million records.
The Last Watchdog
AUGUST 6, 2018
Related podcast: Why identities are the new firewall. Curcio: The biggest fundamental challenge for any organization is to get out of the password business altogether. The more passwords an organization has to manage across all of their users, the higher the likelihood of a critical one being breached.
eSecurity Planet
JULY 6, 2021
Like SolarWinds, both companies serve large B2B audiences, where Kaseya’s products produce hundreds of end products and services. After a series of highly publicized ransomware attacks this spring, the Kaseya attack most resembles the compromise of SolarWinds in late 2020.
eSecurity Planet
APRIL 9, 2024
These checklists include security standards and best practices for SaaS and cloud applications, and B2B SaaS providers use them to guarantee that their solutions match customer security standards. Are firewalls configured and maintained to prevent unwanted access and data breaches?
SC Magazine
FEBRUARY 19, 2021
I think at the federal level that’s about all you can really do – you can’t mandate specifics like use this specific access control, or this specific firewall, or this specific email security. It depends whether the company is in the B2C market or in B2B. It’s not a bad thing in the B2B world.
Expert insights. Personalized for you.
122 
Let's personalize your content