article thumbnail

Unpatched Exchange Servers an overlooked risk

CSO Magazine

Use of known/fixed/default passwords and credentials. Get the latest from CSO by signing up for our newsletters. ] They are so broad in their “badness,” however, that any organization should take notice and ensure they are not doing them. The two bad practices are: Use of unsupported (or end-of-life) software.

CSO 127
article thumbnail

Passwordless company claims to offer better password security solution

CSO Magazine

Stytch, a company founded to spread the adoption of passwordless authentication, has announced what it's calling a modern upgrade to passwords. The cloud-based solution addresses four common problems with passwords that create security risks and account friction. Password reuse. Strength assessment. Better reset.

Passwords 119
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

In-app browser security risks, and what to do about them

CSO Magazine

In-app browsers can pose significant security risks to businesses, with their tendency to track data a primary concern. This was highlighted in recent research which examined how browsers within apps like Facebook, Instagram and TikTok can be a data privacy risk for iOS users. To read this article in full, please click here

Risk 137
article thumbnail

Inactive accounts pose significant account takeover security risks

CSO Magazine

Inactive and non-maintained accounts pose significant security risks to users and businesses, with cybercriminals adept at using information stolen from forgotten or otherwise non-upheld accounts to exploit active accounts.

article thumbnail

APT actors exploit flaw in ManageEngine single sign-on solution

CSO Magazine

Cyberespionage groups are exploiting a critical vulnerability patched earlier this month in ManageEngine ADSelfService Plus, a self-service password management and single sign-on (SSO) solution for Active Directory environments. Sign up for CSO newsletters. ]. Sign up for CSO newsletters. ].

CSO 113
article thumbnail

Why authentication is still the CISO’s biggest headache

CSO Magazine

Meanwhile, persistent risks associated with ineffective authentication strategies and processes threaten businesses as they become more agile and remote, requiring security teams to rethink approaches to authentication in the modern landscape. Authentication a significant obstacle for modern CISOs.

article thumbnail

SecureAuth unveils new end-to-end access and authentication solution

CSO Magazine

"If, after initial authentication, you never authenticate again, a bad actor could potentially run rampant in your system," he tells CSO. They continually evaluate risk signals observed during a session to determine if something has changed and whether they need to reauthenticate."