CyberSecurity Insiders

FEBRUARY 3, 2022

It includes integration of Glyptodon Enterprise into Keeper Security’s zero-trust and zero-knowledge security and encryption architecture, resulting in a highly-secure, agentless remote access platform, without the need of a virtual private network (VPN). “In Keeper is SOC-2, FIPS 140-2 and ISO 27001 Certified.

Password Management 80

Password Management Passwords Encryption Data breaches 80

Troy Hunt

JANUARY 10, 2018

Blocking legitimate users is part of that problem, blocking users wanting to protect their traffic with a VPN is another: This has been there for the past year now. They also blacklist vpn IP addresses. This is poor form as it can break tools that encourage good security practices such as password managers.

Hacking 279

Hacking Government Encryption Risk 279

Thales Cloud Protection & Licensing

OCTOBER 24, 2019

That includes setting up a VPN through which remote employees can access work assets. Per Symantec , they should specifically require passwords that contain at least 16 characters comprised of upper- and lowercase letters, numbers and symbols. Of course, passwords don’t provide absolute protection for business accounts.

Security Awareness 83

Security Awareness InfoSec Passwords Accountability 83

Digital Shadows

OCTOBER 23, 2024

This isn’t the first time we’ve seen Scattered Spider target password managers. Having identified a new target account, the threat actor made another call to the help desk and requested a password reset for the domain administrator account, which also carried Okta Super Administrator privileges.

Social Engineering 122

Social Engineering Engineering Accountability Backups 122

Digital Shadows

OCTOBER 23, 2024

This isn’t the first time we’ve seen Scattered Spider target password managers. Having identified a new target account, the threat actor made another call to the help desk and requested a password reset for the domain administrator account, which also carried Okta Super Administrator privileges.

Social Engineering 52

Social Engineering Engineering Accountability Backups 52

ForAllSecure

MARCH 1, 2022

Vamosi: Within InfoSec there's an informal use of AppSec as well. And I use a VPN that doesn't log my websites. Don't use familiar passwords seriously. If you want nothing to connect back to you choose an entirely new set of passwords. You need a VPN. You want a VPN that doesn't log transactions.

Hacking 52

Hacking Mobile Cryptocurrency VPN 52