Security News

What to do when 2FA won't allow you into your Linux servers
2021-07-07 17:59

If two-factor authentication logins on your Linux servers are giving you fits, Jack Wallen has the solution for you. Recently, I had an incident where a two-factor authentication-enabled Linux server wouldn't allow me in via SSH. Fortunately, I had physical access to the server, so it wasn't a complete disaster.

Twitter now lets you use security keys  as the only 2FA method
2021-07-01 11:37

Twitter now lets users use security keys as the only two-factor authentication method while having all other login methods disabled, as the social network announced three months ago, in March. 2FA is an additional security layer for Twitter accounts requiring users to use a security key or enter a code together with their passwords to log into their accounts.

Google now requires app developers to verify their address and use 2FA
2021-06-29 02:39

Google on Monday announced new measures for the Play Store, including requiring developer accounts to turn on 2-Step Verification, provide an address, and verify their contact details later this year. The new identification and two-factor authentication requirements are a step towards strengthening account security and ensuring a safe and secure app marketplace, Google Play Trust and Safety team said.

How to secure your WordPress login with 2FA
2021-06-10 18:23

Jack Wallen shows you how to add two-factor authentication to your WordPress sites to avoid unwanted intrusions. Figure A. The WP 2FA plugin should appear below the search, where you can click Install Now to add the feature.

How to enable SSH 2FA on AlmaLinux for more secure logins
2021-05-27 17:28

If you've started rolling out AlmaLinux to your data centers, you should enable 2FA for SSH authentication. One way to beef up the security of any Linux server is to enable two-factor authentication for SSH logins.

S3 Ep34: Apple bugs, scammers busted, and how crooks bypass 2FA [Podcast]
2021-05-26 18:56

Police arrest eight suspects in an online scamming ring. We explain how WhatsApp messages from hacked accounts are helping cybercrooks bypass 2FA. Oh! No! of the week.

Twitter now supports multiple 2FA security keys on mobile and web
2021-03-15 18:00

Twitter has added support for multiple security keys to accounts with two-factor authentication enabled for logging into the social network's web interface and mobile apps. "Secure your account with multiple security keys," Twitter said.

How to install and configure 2FA on AlmaLinux
2021-03-11 21:38

Once you have AlmaLinux up and running, one of the first things you should do is set up two-factor authentication for SSH. After all, you don't want to rely solely on SSH for authentication to your servers-not in today's world. How to install the google-authenticator command on AlmaLinux.

Cloning Google Titan 2FA keys
2021-01-12 12:16

The cloning works by using a hot air gun and a scalpel to remove the plastic key casing and expose the NXP A700X chip, which acts as a secure element that stores the cryptographic secrets. The exploit allows an attacker to obtain the long-term elliptic curve digital signal algorithm private key designated for a given account.

Ubiquiti: Change Your Password, Enable 2FA
2021-01-11 21:33

Ubiquiti, a major vendor of cloud-enabled Internet of Things devices such as routers, network video recorders, security cameras and access control systems, is urging customers to change their passwords and enable multi-factor authentication. The company says an incident at a third-party cloud provider may have exposed customer account information and credentials used to remotely manage Ubiquiti gear.