Thales Cloud Protection & Licensing

JUNE 14, 2018

In this blog, and in an accompanying one by my Thales colleague Juan Asenjo, we will discuss the subject of big data analytics, and how it is enabling a new behavior-based authentication evolution for easier and more robust identity management. Did you know that every zebra has its own unique stripe pattern? I don’t think this is Alex.

Big data 54

Big data Authentication Banking Mobile 54

Schneier on Security

NOVEMBER 8, 2017

Hearing on "Securing Consumers' Credit Data in the Age of Digital Commerce". Subcommittee on Digital Commerce and Consumer Protection. Subcommittee on Digital Commerce and Consumer Protection. My popular newsletter Crypto - Gram and my blog Schneier on Security are read by over 250,000 people. Before the. 1 November 2017.

Computers and Electronics 212

Computers and Electronics Identity Theft Internet Internet 212

SiteLock

AUGUST 27, 2021

Now, let’s take a closer look at SSL and HTTPS to understand why this was such an important feature to support, and why you should have HTTPS enabled on your website no matter your CMS or business case. So what is SSL? And what is HTTPS? Why everyone should have SSL on their website.

eCommerce 52

eCommerce Insurance Encryption Internet 52

Troy Hunt

FEBRUARY 19, 2023

I checked the customer's account on Stripe and it did indeed show an active 50RPM subscription, but when drilling down into the associated payment, I found the following: Ok, so at least I know where things have started to go wrong, but why? When that call doesn't happen, well, let's go down the first rabbit hole.

Firewall 338

Firewall Internet Internet Risk 338

SecureList

AUGUST 15, 2022

IT threat evolution in Q2 2022. IT threat evolution in Q2 2022. Non-mobile statistics. IT threat evolution in Q2 2022. Mobile statistics. Targeted attacks. New technique for installing fileless malware. The attackers were using this to hide a last-stage Trojan in the file system. WinDealer’s man-on-the-side spyware.

Mobile 79

Mobile Ransomware Malware Encryption 79

Troy Hunt

JUNE 30, 2022

Yet from time to time, I get messages along the lines of this: Why are you using SHA-1? Both these positions make no sense whatsoever when you peel back the covers and understand what's happening underneath, but I get how on face value these conclusions can be drawn. It's insecure and deprecated.

Passwords 308

Passwords Identity Theft Consumer Services Password Management 308

The Last Watchdog

APRIL 28, 2022

Passwords have become ubiquitous with digital. The humble password is nothing more than a digital key that opens a door. Whereas in the digital world, people are required to make their own passwords, which they then have to remember and type every time. Which begs the question: why do people create their own passwords?

Passwords 237

Passwords Encryption Phishing Social Engineering 237

SecureList

FEBRUARY 16, 2023

By clicking what appeared to be a link to the movie, the visitor got to view the official trailer or a film studio logo. Those who chose to spend their money on a shady website risked never getting what they ordered. Those who just could not wait were in for a disappointment and a waste of cash.

Phishing 90

Phishing Scams Accountability Energy and Utilities 90

Jane Frankland

FEBRUARY 1, 2023

As I thought about it and last week’s blog , I thought I’d put together an Action Pack, similar to what I did when the Covid-19 pandemic struck, and I witnessed many of my entrepreneurial friends struggle to find clients and keep afloat. Just look at the tech layoff counter this week ! It’s a sad affair.

Cybersecurity 130

Cybersecurity Accountability Media Marketing 130

Security Boulevard

MAY 26, 2022

Configuration Drift for Cloud-Native Machine Identities. What is configuration drift? There are a variety of reasons why this can happen, and the consequences of drift vary significantly—from simply being an annoyance to causing drastic failures in security and production. How is drift related to machine identities?

Digital transformation 59

Digital transformation Technology Risk 59

Jane Frankland

FEBRUARY 1, 2023

As I thought about it and last week’s blog , I thought I’d put together an Action Pack, similar to what I did when the Covid-19 pandemic struck, and I witnessed many of my entrepreneurial friends struggle to find clients and keep afloat. Just look at the tech layoff counter this week ! It’s a sad affair.

Cybersecurity 130

Cybersecurity Accountability Media Government 130

Security Boulevard

MAY 12, 2022

What Is SPIFFE and How Does It Impact Machine Identities? Why SPIFFE was created. Protecting the network isn’t what it used to be. As we evolved further into the digital age, the walls came down, and the number of identities continued to grow exponentially. brooke.crothers. Thu, 05/12/2022 - 13:27.

Architecture 52

Architecture Authentication Data breaches Software 52

Troy Hunt

NOVEMBER 14, 2018

Last week I wrote a couple of different pieces on passwords, firstly about why we're going to be stuck with them for a long time yet and then secondly, about how we all bear some responsibility for making good password choices. This week, I wanted to focus on going beyond passwords and talk about 2FA.

Passwords 261

Passwords Authentication Accountability Mobile 261

Troy Hunt

FEBRUARY 27, 2018

When I launched Pwned Passwords V2 last week , I made it fast - real fast - and I want to talk briefly here about why that was important, how I did it and then how I've since shaved another 56% off the load time for requests that hit the origin. Why Speed Matters for Pwned Passwords. Then the server can warn the user.

Passwords 199

Passwords Internet Internet Architecture 199

Identity IQ

MAY 2, 2023

What are the Benefits of a Password Manager? This blog discusses why passwords matter, how password managers work, and what benefits they offer. What is a Password Manager? IdentityIQ Passwords are essential when keeping your information safe on your devices. How Does a Password Manager Work?

Password Management 52

Password Management Passwords Identity Theft Accountability 52

Troy Hunt

FEBRUARY 21, 2018

That's why I created Pwned Passwords - because there was a gap that needed filling - and let's face it, I do have access to rather a lot of them courtesy of running HIBP. Here's what it's all about: There's Now 501,636,842 Pwned Passwords.

Passwords 279

Passwords Data breaches Mobile Risk 279

ForAllSecure

MAY 2, 2023

Sometimes a negative Yelp review can reveal their true identity. Daniel Clemens, CEO of ShadowDragon, talks about his more than two decades of digital investigations, from the origins of the Code Red worm to the mass shooter in Las Vegas, with a fair number of pedophiles and human traffickers identified as well. You find clues.

Hacking 40

Hacking Media InfoSec Internet 40

Security Boulevard

MAY 13, 2022

Plaintext is what the message looks like unaltered, but ciphertext scrambles the message to a point where it’s unreadable—unless you have the right authorization to decrypt the code back into plaintext. Encryption algorithms are mathematical formulas that transform plaintext into ciphertext. Types of Encryption. Symmetric Encryption.

Encryption 52

Encryption Computers and Electronics Internet Internet 52

Spinone

DECEMBER 28, 2018

What are the items on an effective cloud security checklist? With droves of today’s organizations moving to cloud environments at a rapid pace, there is no question that cloud infrastructure is a viable solution for today’s production workloads. Cybersecurity has been a major concern with cloud infrastructure since its inception.

Backups 69

Backups Technology Computers and Electronics Cybersecurity 69

Scary Beasts Security

MAY 17, 2021

But what happens when the Greaseweazle reports data that is heavily corrupted and unreadable? What if the unreadable disc contains some historic treasure, such as source code for an iconic game? There are many good, modern solutions for reading data off old floppy discs and drives. Are we out of luck? A Greaseweazle F7 Plus.

Software 178

Software Education Engineering Risk 178

CyberSecurity Insiders

JANUARY 19, 2022

As organizational IT and security teams enabled hybrid work models, digitized processes and transformed business models, products and services, their security posture changed dynamically and often for the worse. By Amit Shaked, CEO, Laminar . Data security is a C-suite imperative for 2022 and beyond. Now, it’s time to right the ship.

CISO 126

CISO Data breaches Artificial Intelligence Digital transformation 126

Elie

JUNE 6, 2019

For South Asian women, a major hurdle to their meaningful participation online is their ability to ensure their safety. This post illustrates this challenge by recounting the safety and privacy challenges faced by women across India, Pakistan, and Bangladesh, who talked to us about their online experiences. award-winning CHI’19 paper. Background.

Media 82

Media Banking Accountability Risk 82