Krebs on Security

SEPTEMBER 22, 2023

LastPass officially instituted this change back in 2018, but some undisclosed number of the company’s earlier customers were never required to increase the length of their master passwords. In February 2018, LastPass changed the default to 100,100 iterations. LastPass sent this notification to users earlier this week.

Passwords 323

Passwords Encryption Password Management Cryptocurrency 323

Krebs on Security

NOVEMBER 6, 2018

Snippets from that fascinating conversation are recounted below, and punctuated by accounts from a recent victim who lost more than $100,000 after his mobile phone number was hijacked. ” Indeed, the theft of $100,000 worth of cryptocurrency in July 2018 was the impetus for my interview with REACT. million customers.

Mobile 267

Mobile Cryptocurrency Accountability Passwords 267

Troy Hunt

NOVEMBER 14, 2018

2FA, MFA, 2-Step They may all be familiar, but there are important differences that warrant explanation and we'll start with the acronym we most commonly see: 2FA is two-factor authentication. If someone obtains the thing that you know then it's (probably) game over and they have access to your account. It's a subset of MFA.

Passwords 271

Passwords Authentication Accountability Mobile 271

Troy Hunt

JULY 8, 2019

Almost 2 years ago to the day, I wrote about Passwords Evolved: Authentication Guidance for the Modern Era. This wasn't so much an original work on my behalf as it was a consolidation of advice from the likes of NIST, the NCSC and Microsoft about how we should be doing authentication today.

Passwords 248

Passwords Accountability Authentication Data breaches 248

Thales Cloud Protection & Licensing

OCTOBER 28, 2021

Trick or Treat: The Choice is Yours with Multifactor Authentication. Whether you want the ‘trick’ of a malevolent threat actor infiltrating your network by exploiting a compromised password or the ‘treat’ from the peace of mind associated with multifactor authentication, the choice is yours. Fri, 10/29/2021 - 05:29.

Authentication 71

Authentication VPN Passwords Accountability 71

SecureWorld News

SEPTEMBER 18, 2024

Dunkin' Donuts (2015-2018): The company faced multiple credential stuffing attacks that led to unauthorized access to customer accounts. Earl Enterprises (2018-2019): The parent company of restaurant chains like Planet Hollywood and Buca di Beppo suffered a 10-month-long data breach affecting millions of customers. Subway U.K.

Cybersecurity 116

Cybersecurity Data breaches Accountability Passwords 116

Malwarebytes

MAY 14, 2021

Gaming accounts had an essence of innate disposability to them, even if this wasn’t the case (how disposable is that gamertag used to access hundreds of dollars worth of gaming content)? These days, gaming security is taken very seriously indeed. World of Warcraft developers Blizzard released their first authenticator way back in 2009.

Accountability 84

Accountability Authentication Passwords Social Engineering 84