Troy Hunt

DECEMBER 10, 2019

So why doesn't every site take away the ability for people to choose their own passwords? Why not just generate the password for them thus completely eradicating password reuse? It doesn't matter who generated the password. passwords ?? But how relevant is this criticism when the passwords are system-generated?

Passwords 161

Passwords Password Management Accountability Authentication 161

eSecurity Planet

DECEMBER 3, 2021

Normally account take overs are due to insecure passwords or recovery options, this is definitely something different. How to screen for natural infosec talent: Ask for a worst case scenario for any common situation. Haddix continues to provide his insights while serving as the Head of Security and Risk Management for Ubisoft.

Accountability 139

Accountability Cybersecurity Penetration Testing InfoSec 139

SecureWorld News

SEPTEMBER 7, 2023

The panel will tackle topics and questions, including: The potential risks quantum computing poses to current cryptographic methods. When will these risks come to fruition, and who are the main threat actors? Director of Information Security, State of Colorado Governor's Office of Information Technology; and Toby Zimmerer, Sr.

Encryption 90

Encryption Technology Risk Architecture 90

eSecurity Planet

FEBRUARY 25, 2022

Williams urged viewers to focus on the basics, like phishing , passwords and patching /updating, as those are still the entry point of many attacks. Inventory B2B VPNs and block all high-risk protocols (see slide below). Inventory B2B VPNs and block all high-risk protocols (see slide below). Plan for rapid containment.

B2B 122

B2B Cyber Attacks Firewall Cyber threats 122

Troy Hunt

JANUARY 10, 2018

Just as in my post on NatWest last month , that entry point must be as secure as possible or else everything else behind there gets put at risk. By recognising this, they also must accept that the interception may occur on that first request - the insecure one - and that subsequently leaves a very real risk in their implementation.

Hacking 279

Hacking Government Risk Encryption 279

ForAllSecure

MARCH 24, 2021

Anyway I was testing this suite when I happened to randomly strike two keys -- I think it was control and B -- and up popped the password manager, displaying all my test passwords in the clear. Thing was, the manager required its own password, which I had not entered; remember, I had hit only two keys. This was a software flaw.

Software 52

Software Passwords Internet Internet 52

ForAllSecure

MARCH 24, 2021

Anyway I was testing this suite when I happened to randomly strike two keys -- I think it was control and B -- and up popped the password manager, displaying all my test passwords in the clear. Thing was, the manager required its own password, which I had not entered; remember, I had hit only two keys. This was a software flaw.

Software 52

Software Passwords Internet Internet 52