Identity & Access December 16, 2022

The cybersecurity takeaway from Twitter’s verification chaos

4 min read - Twitter has been verifiably bonkers since electric car and rocket mogul Elon Musk took over and reworked the social network’s long-standing verification system. This provides a valuable lesson about the link between verification or authentication and between security and usability.…

Data Protection December 7, 2022

Will the 2.5M records breach impact student loan relief?

2 min read - Over 2.5 million student loan accounts were breached in the summer of 2022, according to a recent Maine Attorney General data breach notification. The target of the breach was Nelnet Servicing, a servicing system and web portal provider for the…

Data Protection September 26, 2022

Making the leap: The risks and benefits of passwordless authentication

5 min read - The password isn’t going anywhere. Passwordless authentication is gaining momentum, though. It appears to be winning the battle of how companies are choosing to log in. Like it or not, the security industry must contend with both in the future.…

News February 2, 2022

Over 1,200 phishing kits found in the wild with ability to Steal 2FA codes

2 min read - Academics discovered more than 1,200 phishing kits equipped with the ability to intercept users’ two-factor authentication (2FA) codes in the wild. Two types of 2FA phishing As noted by researchers from Stony Brook University sponsored by security firm Palo Alto…

Identity & Access January 17, 2022

The State of Credential Stuffing Attacks

4 min read - Credential stuffing has become a preferred tactic among digital attackers over the past few years. As reported by Help Net Security, researchers detected 193 billion credential stuffing attacks globally in 2020. Financial services groups suffered 3.4 billion of those attacks.…

Government October 25, 2021

Nobelium espionage campaign persists, service providers in crosshairs

2 min read - In an advisory released on October 24, Microsoft announced ongoing campaigns it has attributed to the Nobelium state-sponsored threat group. IBM X-Force tracks this group as Hive099. If the name sounds familiar, that’s because it is the same group that…

Zero Trust September 20, 2021

Zero Trust: Follow a Model, Not a Tool

3 min read - The zero trust model is going mainstream, and for good reason. The rise in advanced attacks, plus IT trends that include the move to hybrid cloud and remote work, demand more exacting and granular defenses. Zero trust ensures verification and…

Mobile Security July 20, 2021

How to Fix the Big Problems With Two-Factor and Multifactor Authentication

3 min read - Getting a second opinion is a great idea in both medicine and end-user cybersecurity. Two-factor authentication (2FA) and multifactor authentication (MFA) are powerful tools in the fight against all kinds of cyberattacks that involve end-user devices and internet-based services. There’s…

Mobile Security July 16, 2021

3 Myths About Threat Actors and Password Safety

2 min read - You’ve seen the memes and the warnings on social media — answering questions about your life history is ruining your password safety. It’s giving the bad guys the information they need to figure out your passwords and get the answers…

Incident Response June 16, 2021

Why a Phishing Attack Is Still Profitable — And How To Stop One

4 min read - As the business world continues to grapple with an expanding definition of new normal, the phishing attack remains a common tactic for attackers. Why are phishing attacks still happening? How can we prevent them? We spoke to a threat analyst…