CSO Magazine

MAY 27, 2021

Credential stuffing is the automated use of collected usernames and passwords to gain fraudulent access to user accounts. Credential stuffing attacks are one of the most common ways cybercriminals abuse stolen usernames and passwords. Check out the password hall of shame (and 10 tips for better password security). |

CSO 119

CSO Passwords Data breaches Accountability 119

CSO Magazine

OCTOBER 19, 2021

All these attacks key on traditional credentials, usernames and passwords, which are past their expiration date as a legitimate security measure. Get the latest from CSO by signing up for our newsletters. ] An obvious way forward in enhancing access security is multifactor authentication (MFA).

Authentication 130

Authentication CSO Social Engineering Engineering 130

CSO Magazine

JANUARY 13, 2022

Credential stuffing is a cyberattack in which exposed usernames and passwords are used to gain fraudulent access to user accounts through large-scale, automated login requests. Attackers are asking: What does it look like to make a legitimate request? How can we emulate that?

CSO 130

CSO Data breaches Passwords Accountability 130

CSO Magazine

SEPTEMBER 1, 2021

Use of known/fixed/default passwords and credentials. Get the latest from CSO by signing up for our newsletters. ] They are so broad in their “badness,” however, that any organization should take notice and ensure they are not doing them. The two bad practices are: Use of unsupported (or end-of-life) software.

CSO 127

CSO Risk Architecture Passwords 127

SC Magazine

MAY 3, 2021

Dan Meacham is chief information security officer and CSO with Legendary Entertainment, the production company behind Godzilla vs. Kong and other popular films such as The Dark Knight and Jurassic World. If they can pass this authentication process, then they don’t even need a password to log in. Legendary Entertainment).

CSO 69

CSO InfoSec Media Authentication 69

CSO Magazine

SEPTEMBER 20, 2021

Cyberespionage groups are exploiting a critical vulnerability patched earlier this month in ManageEngine ADSelfService Plus, a self-service password management and single sign-on (SSO) solution for Active Directory environments. Sign up for CSO newsletters. ]. Sign up for CSO newsletters. ].

CSO 113

CSO Password Management Passwords Software 113

CSO Magazine

FEBRUARY 7, 2022

For example, instead of trying to find a software vulnerability, a social engineer might call an employee and pose as an IT support person, trying to trick the employee into divulging his password. Get the latest from CSO by signing up for our newsletters. ] Learn what makes these 6 social engineering techniques so effective. |

Social Engineering 98

Social Engineering Engineering CSO Passwords 98

The Security Ledger

DECEMBER 21, 2022

Paul speaks with Caleb Sima, the CSO of the online trading platform Robinhood, about his journey from teenage cybersecurity phenom and web security pioneer, to successful entrepreneur to an executive in the trenches of protecting high value financial services firms from cyberattacks. Caleb Sima is the CSO at Robinhood.

CSO 52

CSO Financial Services CISO Mobile 52

SecureBlitz

JUNE 27, 2023

Traditional authentication techniques, such as passwords and PINs, are no longer enough to safeguard against sophisticated assaults. CSO Online recently reported a […] The post The Rise of Advanced Authentication: Strengthening Digital Defense appeared first on SecureBlitz Cybersecurity.

Authentication 97

Authentication CSO Passwords Cybersecurity 97

CSO Magazine

OCTOBER 20, 2022

Distributing malware inside password-protected archives has long been one of the main techniques used by attackers to bypass email security filters. More recently, researchers have spotted a variation that uses nested self-extracting archives that no longer require victims to input the password.

Passwords 96

Passwords Malware 96

CSO Magazine

APRIL 14, 2021

Until then, you can take steps to protect your networks better, starting with handling passwords better in your domain. The concept of zero trust is that nothing should be trusted by default. Most of us are trying to work our way to zero trust but are not there yet.

Passwords 98

Passwords 98

CSO Magazine

MARCH 28, 2023

Authentication-related attacks grew in 2022, taking advantage of outdated, password-based authentication systems, according to a study commissioned by HYPR, a passwordless multifactor authentication (MFA) provider based in the US.

Authentication 109

Authentication Passwords Marketing Phishing 109

CSO Magazine

FEBRUARY 1, 2021

The FIDO (fast identity online) Alliance is an industry association that aims to reduce reliance on passwords for security, complementing or replacing them with strong authentication based on public-key cryptography.

Passwords 97

Passwords Authentication 97

CSO Magazine

MARCH 30, 2022

Authentication continues to test CISOs for several reasons, with its modern definition being the first to address, Netskope CISO Lamont Orange tells CSO. “We Authentication a significant obstacle for modern CISOs. To read this article in full, please click here

Authentication 107

Authentication CISO CSO Passwords 107

CSO Magazine

APRIL 13, 2022

In his career, he has seen people pick up and use dropped thumb drives, give up passwords over the phone and, yes, even click on simulated phishing links. Sign up for CSO newsletters. ]. He has also seen the real-world consequences of such actions.

Penetration Testing 95

Penetration Testing CSO Phishing Passwords 95

CSO Magazine

APRIL 7, 2021

Most large enterprises regularly change their Kerberos passwords. If the KRBTGT account password hash is stolen or broken with an attack, the attackers can then grant themselves full access to your network with the necessary authentication. When an attacker wiggles into a network, they can use the golden ticket attack sequence.

Passwords 90

Passwords Accountability Authentication 90

CSO Magazine

AUGUST 26, 2022

LastPass, maker of a popular password management application, revealed Thursday that an unauthorized party gained access to its development environment through a compromised developer account and stole some source code and proprietary technical information. To read this article in full, please click here

Password Management 79

Password Management Passwords Architecture Encryption 79

Security Boulevard

OCTOBER 16, 2022

Former Uber CSO Joe Sullivan was found guilty of obstructing a federal investigation in connection with the attempted cover-up of a 2016 hack at Uber, NIST and Microsoft say that mandatory password expiration is no longer needed but many organizations are still doing it, and how fake executive profiles are becoming a huge problem for […].

Passwords 52

Passwords CSO Hacking Accountability 52

CSO Magazine

SEPTEMBER 30, 2021

CISOs looking to beef up their customer-facing authentication procedures to thwart cyberattacks need to walk a fine line. You want the method to provide tight security without being too complicated, confusing, or onerous for end users.

Authentication 128

Authentication Passwords Retail CISO 128

CSO Magazine

JUNE 2, 2022

If, after initial authentication, you never authenticate again, a bad actor could potentially run rampant in your system," he tells CSO. The days of granting blanket trust after initial authentication are over, says SecureAuth CEO Paul Trulove. "If,

Authentication 91

Authentication Artificial Intelligence CSO Passwords 91

CSO Magazine

JUNE 8, 2023

BastionZero has announced the release of SplitCert to provide password-free authentication access to databases. It uses Mutual TLS (mTLS) and cryptographic multi-party computation (MPC) to provide certificate-based authentication for popular, self-hosted Postgres and MongoDB databases, according to the vendor.

Authentication 75

Authentication Passwords 75

SC Magazine

JUNE 18, 2021

In a notice released to its customers, Wegmans said the type of customer information included names, addresses, phone numbers, birth dates, Shoppers Club numbers, and email addresses and passwords for access to Wegmans.com accounts. Tracy said companies really need to understand the shared security model of the cloud providers.

CSO 107

CSO Passwords Authentication Accountability 107

The Last Watchdog

APRIL 5, 2019

In the past, for example, companies could get away with using a default password, and depend on firewalls and other internal security tools to provide protection. Employers and employees like using the cloud, Lakshmanan pointed out, because it completely changes the paradigm of the user’s productivity. Everything they need is there.

Digital transformation 203

Digital transformation CSO Firewall Risk 203

Jane Frankland

APRIL 15, 2025

Whether its a mis-click on a phishing email, poor password management, acting on a deepfake, or a misconfiguration, human error accounts for most breaches. But just like the coffee drinker who bypasses their local shop, our focus on technology often distracts us from whats most important.

Risk 100

Risk Technology Cybersecurity Security Awareness 100

SecureWorld News

MARCH 10, 2021

He also says that it is very important to note that this issue was not the result of compromised account passwords, SSH keys, or personal access tokens (PATs). GitHub CSO Mike Hanley takes security seriously. Mike Hanley was hired as GitHub's new CSO in February 2021.

Authentication 98

Authentication CSO Accountability Engineering 98

CSO Magazine

NOVEMBER 23, 2022

Do you recall when you last reset your Kerberos password? Hopefully that was not the last time I suggested you change it, back in April of 2021, when I urged you to do a regular reset of the KRBTGT account password.

Passwords 73

Passwords Authentication Accountability 73

CyberSecurity Insiders

MAY 16, 2022

By Amanda Fennell, CSO and CIO, Relativity. While exploring phishing examples and best tools to manage passwords, offer to dive into how tools actually work. Think about password management. The average person, in their personal and professional life, may be managing as many as 200 application accounts, each with a password.

CSO 131

CSO Passwords Password Management Accountability 131

The Security Ledger

SEPTEMBER 25, 2018

SAP CSO Justin Somaini. For consumers, that means boning up on account security – maybe getting a password manager. Somaini has the distinction of being the first CSO at Yahoo and also at Symantec. October is Cybersecurity awareness month. But what if you’re the Chief Security Officer of an $128 billion global corporation?

CSO 40

CSO Hacking Security Awareness Password Management 40

Duo's Security Blog

NOVEMBER 20, 2023

“It took nearly 11 months (328 days) to identity and contain data breaches resulting from stolen or compromised credentials.” – IBM’s Cost of Data Breach Report 2023 I recently came across a 2012 article from CSO Online , and realized that it has been more than 11 years since the phrase “Identity is the new perimeter” was coined!

Threat Detection 138

Threat Detection Authentication Accountability Data breaches 138

CSO Magazine

JANUARY 4, 2023

Every business needs a secure way to collect, manage, and authenticate passwords. Storing passwords in the browser and sending one-time access codes by SMS or authenticator apps can be bypassed by phishing. Unfortunately, no method is foolproof. To read this article in full, please click here

Authentication 129

Authentication Password Management Backups Passwords 129

CSO Magazine

SEPTEMBER 1, 2022

Password management vendor Dashlane has announced the introduction of integrated passkey support in its password manager, unveiling an in-browser passkey solution to help tackle the issue of stolen/misused passwords. Passkey support includes secure sharing, access control, multi-device sync capabilities.

Password Management 66

Password Management Passwords Authentication 66

CSO Magazine

NOVEMBER 2, 2022

Passwords have always been a pain point in securing computing infrastructure. Complexity and length are key components of a strong password, but both make it inherently difficult for a human to remember.

Passwords 119

Passwords Marketing 119

Duo's Security Blog

JULY 13, 2021

Cisco Secure is sponsoring the event — look for our goodbye to passwords video, or if you’re interested in careers at Cisco/Duo, stop into the #job-postings Discord channel to see what roles are open. With so much to look forward to, we can’t wait for Black Hat to begin.

CISO 105

CISO CSO Authentication Passwords 105

Security Boulevard

NOVEMBER 24, 2022

How to reset a Kerberos password and get ahead of coming updates. Do you recall when you last reset your Kerberos password? Hopefully that was not the last time I suggested you change it, back in April of 2021, when I urged you to do a regular reset of the KRBTGT account password. Leer más CSO Online.

Passwords 40

Passwords CSO Authentication Accountability 40

CSO Magazine

SEPTEMBER 29, 2021

Faced with this additional hurdle that prevents them from exploiting stolen passwords, cybercriminals have had to adapt, too, and come up with innovative ways to extract one-time use authentication codes from users.

Passwords 136

Passwords Cybercrime Authentication Accountability 136

CSO Magazine

JULY 29, 2021

Whether it’s an inability to properly manage password complexity across multiple systems, poor social media habits, or even a lack of awareness with things like email links, online shopping, or app and software usage. It’s no secret that humans are the biggest vulnerability to any corporate network.

Media 141

Media Passwords Software 141

Security Affairs

DECEMBER 21, 2022

“Upon investigation, we have concluded that such access was used to copy Okta code repositories,” writes David Bradbury, the Okta Chief Security Officer (CSO) in the mail. The Lapsus$ extortion group compromised the laptop of one of its support engineers that allowed them to reset passwords for some of its customers.

Hacking 102

Hacking CSO Data breaches Engineering 102