The Last Watchdog

OCTOBER 15, 2019

If there ever was such a thing as a cybersecurity silver bullet it would do one thing really well: eliminate passwords. Threat actors have proven to be endlessly clever at abusing and misusing passwords. So what’s stopping us from getting rid of passwords altogether? Passwords may have been very effective securing Roman roads.

Passwords 129

Passwords Authentication Data breaches Internet 129

Krebs on Security

APRIL 6, 2022

Since surfacing in late 2021, LAPSUS$ has gained access to the networks or contractors for some of the world’s largest technology companies, including Microsoft , NVIDIA , Okta and Samsung. “They were calling up consumer service and tech support personnel, instructing them to reset their passwords.

Social Engineering 231

Social Engineering Phishing Engineering Accountability 231

Thales Cloud Protection & Licensing

SEPTEMBER 10, 2019

The study also revealed that 94% of IT professionals say their organizations’ security policies around access management was influenced by breaches of consumer services in the last 12 months. Perhaps someday, password fatigue, frustration and password resets can truly be a thing of the past.

Consumer Services 115

Consumer Services Authentication Passwords Technology 115

CyberSecurity Insiders

JUNE 16, 2021

In today’s digital world, using our mobile phones to consume services is now a part of everyday life. With the average person now spending 2 hours and 51 minutes on their phone each day, service providers like ecommerce sites and entertainment channels have had to adapt their interfaces so that they also work on a smartphone.

Banking 84

Banking Authentication Mobile Financial Services 84

Thales Cloud Protection & Licensing

JANUARY 7, 2021

Of those surveyed, 20% of respondents indicated that they have deferred on-premises technology spend. Password-based app access: convenient but risky. The other widely used convention by enterprises is to allow employees to login directly to cloud-based applications such as, (but not limited to) Office365, Slack, Agile, with passwords.

Authentication 62

Authentication VPN Passwords Risk 62

SecureList

MAY 25, 2021

Energy and Utilities (10%), Finance (10%), Professional and Consumer Services (10%), Transportation (7%), and Healthcare (7%) were also at the top of their list. According to the victim list published by the threat actors, two-fifths (41%) of JSWorm attacks were targeted against companies in the Engineering and Manufacturing category.

Ransomware 103

Ransomware Encryption Malware Energy and Utilities 103