Google 2FA Approach Turns Android Smartphones Into Security Keys
Smartphones running Android 7.0 and higher can now serve as two-factor authentication (2FA) tools as part of a Google 2FA strategy to boost security across its online services.
Credential Dumping Campaign Hits Multinational Corporations
X-Force researchers observed attackers targeting multinational corporations in various sectors using malicious scripts to automate attacks on misconfigured servers.
Brute-Force Attack Wave Uses Legacy Protocols, Credential Dumps to Compromise Cloud Accounts
A massive brute-force attack campaign used both legacy protocols and credential dumps to compromise cloud user accounts, according to security researchers.
Creating Meaningful Diversity of Thought in the Cybersecurity Workforce
Let's add the diversity of approach, diversity of values and advocacy for deep customer empathy to the cybersecurity workforce diversity we are building.
AI May Soon Defeat Biometric Security, Even Facial Recognition Software
Threat actors will soon gain access to artificial intelligence (AI) tools that will enable them to defeat multiple kinds of authentication systems, even biometric security.
Multifactor Authentication Delivers the Convenience and Security Online Shoppers Demand
When framed as an innovative, even "cool" feature, multifactor authentication can deliver the security online retail customers demand without diminishing the user experience.
New Variant of Mirai Malware Exploits Weak IoT Device Passwords to Conduct Brute-Force Attacks
Security researchers discovered a new variant of Mirai malware known as Miori that is targeting internet of things (IoT) devices to integrate into a larger botnet.
We Need to Talk About NIST’s Dropped Password Management Recommendations
NIST has changed its long-standing recommendations for password management, favoring minimal user friction over complexity requirements and regular password updates.
The Inconvenient Truth About Your Eight-Character Password
Your eight-character password is not as secure as you might think, but there are several simple actions you can take to truly strengthen your password security.
A Proposed Solution to the Password Reuse Problem
A group of researchers proposed a new framework that would enable web services to share users' password hash data in an effort to reduce password reuse.