Krebs on Security

APRIL 6, 2022

“They were calling up consumer service and tech support personnel, instructing them to reset their passwords. They went to a dummy site controlled by the hackers and entered their credentials in a way that served up their usernames and passwords as well as multifactor authentication codes.”

Social Engineering 231

Social Engineering Phishing Engineering Accountability 231

Thales Cloud Protection & Licensing

JANUARY 7, 2021

The traditional IAM model has been to extend remote employees to access applications to employees from VPN and add multifactor authentication (MFA) to add layers of security to the VPN connection. Password-based app access: convenient but risky. Cloud-based access management and authentication. FIDO Authentication.

Authentication 62

Authentication VPN Passwords Risk 62

SecureList

MAY 25, 2021

Energy and Utilities (10%), Finance (10%), Professional and Consumer Services (10%), Transportation (7%), and Healthcare (7%) were also at the top of their list. Make sure commercial VPN solutions and other server-side software are always up to date as exploitation of this type of software is a common infection vector for ransomware.

Ransomware 104

Ransomware Encryption Malware Energy and Utilities 104