Security News
About a third of firms and organisations in Europe and the Middle East still believe the humble password is a good enough security measure, according to a survey carried out by French firm Thales. Thales, which bought secure mobile phone SIM card biz Gemalto in 2017, reckoned that over half of IT pros it polled said that unsecured infrastructure was the most likely attack surface.
Cybercriminals compromise 0.5% of all Microsoft enterprise accounts every month because too few customers are using multi-factor authentication, the company has revealed. In a presentation uploaded to YouTube from the recent RSA Security Conference, director of Identity Security Alex Weinert said 1.2 million accounts were compromised in January 2020 alone.
Microsoft reckons 0.5 per cent of Azure Active Directory accounts as used by Office 365 are compromised every month. "About a half of a per cent of the enterprise accounts on our system will be compromised every month, which is a really high number. If you have an organisation of 10,000 users, 50 will be compromised each month," said Weinert.
Today, I want to take a closer look at the PCI DSS 3.2 standard, starting with Requirement 8 and gradually making our way to Requirement 8.3.2. The standard specifically uses CDE, or the cardholder data environment, instead of "Sensitive data," but the concept is the same - make sure the person requesting access is truly who they claim to be.
How Common is it for Individuals to Remember PINs or Passwords Set by Entities Holding the Information They're Requesting?Humans have enough things to remember as it is and remembering yet another...
Here’s an overview of some of last week’s most interesting news, interviews and articles: Unpatched Android flaw exploited by attackers, impacts Pixel, Samsung, Xiaomi devices A privilege...
The apparent ease with which SIM hijacking attacks are being perpetrated to get the targets’ second authentication factor for crucial accounts (online banking, cryptocurrency exchange, online...
Cisco’s Duo Security, the leading multi-factor authentication (MFA) and Zero Trust for the Workforce provider, announced enhanced MFA support for Amazon Web Services (AWS). AWS customers can add...
TypingDNA announced an innovative MFA solution that combines proprietary typing biometrics technology, SMS OTP or Email OTP. TypingDNA is a leading behavioral biometrics company that protects...
As phishing continues to be the number one method for initiating a breach, investing in anti-phishing technologies or training – preferably both – should be a no-brainer for most companies. As...