Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
World Password Day or Groundhog Day?
Despite decades trying to fortify our passwords with bolt-on solutions, attackers have always found ways to defeat them. Here are four reasons why.
Facebook Accidentally Imported 1.5M Users' Email Data Sans Consent
The social media giant says it did not access the imported data and is notifying affected users.
CERT, CISA Warn of Vuln in at Least 4 Major VPNs
VPN products by Cisco, Palo Alto Networks, F5 Networks, Pulse Secure, insecurely store session cookies.
Credential-Stuffing Attacks Behind 30 Billion Login Attempts in 2018
Using e-mail addresses and passwords from compromised sites, attackers most often targeted retail sites, video-streaming services, and entertainment companies, according to Akamai.
What the Transition to Smart Cards Can Teach the US Healthcare Industry
Healthcare information security suffers from the inherent weakness of using passwords to guard information. Chip-based smart cards could change that.
Stealing Corporate Funds Still Top Goal of Messaging Attacks
Cybercriminals focus on collecting credentials, blackmailing users with fake sextortion scams, and convincing privileged employees to transfer cash. The latter still causes the most damage, and some signs suggest it is moving to mobile.
Shifting Attacks Put Increasing ID Fraud Burden on Consumers
Card-present fraud is down, but attackers continue to find new strategies, and consumers are paying the price.
Debunking 5 Myths About Zero Trust Security
Rather than "trust but verify," a zero trust model assumes that attackers will inevitably get in — if they aren't already. However, several misconceptions are impeding its adoption.
4 Ways At-Work Apps Are Vulnerable to Attack
Collaboration applications make users and IT teams more efficient. But they come with an added cost: security.
Fighting Alert Fatigue with Actionable Intelligence
By fine-tuning security system algorithms, analysts can make alerts intelligent and useful, not merely generators of noise.
Artificial Intelligence: The Terminator of Malware
Is it possible that the combination of AI, facial recognition, and the coalescence of global mass-hack data could lead us toward a Skynet-like future?
Startup Armor Scientific Launches Multifactor Identity System
Company aims to replace usernames and passwords by combining GPS location, biometrics, and keys issued through a blockchain-based network.
6 Tips for Getting the Most from Your VPN
VPNs are critical for information security. But simply having these cozy security tunnels in the toolkit isn't enough to keep an organization's data safe.
The Anatomy of a Lazy Phish
A security engineer breaks down how easy it is for unskilled attackers to trick an unsuspecting user to submit credentials to a phishing site.
6 Tax Season Tips for Security Pros
Here are some practical ways to keep your company safe as Uncle Sam comes calling.
70% of Consumers Want Biometrics in the Workplace
Speed, simplicity, and security underscore their desire, a new study shows.
4 Payment Security Trends for 2019
Visa's chief risk officer anticipates some positive changes ahead.
New Chrome Extension Takes Aim at Password Security
Google adds 'Password Checkup' feature that alerts users if their online credentials have been compromised.
New Phishing Campaign Packs Triple Threat
Attack threatens victims with three "deadly malware" infestations if they don't give up critical email account credentials.
The Rx for HIPAA Compliance in the Cloud
For medical entities, simply following HIPAA cloud service provider guidelines is no longer enough to ensure that your practice is protected from cyber threats, government investigations, and fines.
Online Fraud: Now a Major Application Layer Security Problem
The explosion of consumer-facing online services and applications is making it easier and cheaper for cybercriminals to host malicious content and launch attacks.
US Judge: Police Can't Force Biometric Authentication
Law enforcement cannot order individuals to unlock devices using facial or fingerprint scans, a California judge says.
Advanced Phishing Scenarios You Will Most Likely Encounter This Year
In 2019, there will be no end in sight to email-driven cybercrime such as business email compromise, spearphishing, and ransomware.
Akamai Streamlines Identity Management with Janrain Acquisition
Akamai plans to combine Janrain's Identity Cloud with its Intelligent Platform to improve identity management.
Unpatched Kernel-Level Vuln in IBM Security Tool for Apple MacOS Revealed
Researchers disclose signedness bug in driver used by IBM Trusteer Rapport endpoint security tool after IBM fails to deliver timely patch.
Hackers Bypass Gmail, Yahoo 2FA at Scale
A new Amnesty International report explains how cyberattackers are phishing second-factor authentication codes sent via SMS.
Shhhhh! The Secret to Secrets Management
Companies need to take a centralized approach to protecting confidential data and assets. Here are 12 ways to get a handle on the problem.
Retailers: Avoid the Hackable Holidaze
The most wonderful time of the year? Sure, but not if your business and customers are getting robbed.
Insider Threats & Insider Objections
The ‘tyranny of the urgent’ and three other reasons why it’s hard for CISOs to establish a robust insider threat prevention program.
Republican Committee Email Hacked During Midterms
The National Republican Congressional Committee detected the compromise of four staffers' email accounts in April.
6 Ways to Strengthen Your GDPR Compliance Efforts
Companies have some mistaken notions about how to comply with the new data protection and privacy regulation – and that could cost them.
Another Microsoft MFA Outage Affects Multiple Services
Once again, multifactor authentication issues have caused login problems for users across Office 365 and Azure, among other services.
8 Tips for Preventing Credential Theft Attacks on Critical Infrastructure
Stolen credentials for industrial control system workstations are fast becoming the modus operandi for ICS attacks by cybercriminals.
Empathy: The Next Killer App for Cybersecurity?
The toughest security problems involve people not technology. Here's how to motivate your frontline employees all the way from the service desk to the corner office.
Guilty Plea Made in Massive International Cell Phone Fraud Case
A former West Palm Beach resident is the fifth defendant to plead guilty in a case involving thousands of victims.
Why Password Management and Security Strategies Fall Short
Researchers say companies need to rethink their password training and take a more holistic approach to security.
Where Is the Consumer Outrage about Data Breaches?
Facebook, Equifax, Cambridge Analytica … Why do breaches of incomprehensible magnitude lead to a quick recovery for the businesses that lost or abused the data and such little lasting impact for the people whose information is stolen.
FIFA Reveals Second Hack
Successful phishing campaign leads attackers to confidential information of world soccer's governing body.
Companies Fall Short on 2FA
New research ranks organizations based on whether they offer two-factor authentication.
The Case for MarDevSecOps
Why security must lead the integration of marketing into the collaborative security and development model in the cloud.
10 Steps for Creating Strong Customer Authentication
Between usability goals and security/regulatory pressures, setting up customer-facing security is difficult. These steps and best practices can help.
Securing Severless: Defend or Attack?
The best way to protect your cloud infrastructure is to pay attention to the fundamentals of application security, identity access management roles, and follow configuration best-practices.
Gartner Experts Highlight Tech Trends – And Their Security Risks
Security must be built into systems and applications from the beginning of the design process, they agreed.
Risky Business: Dark Reading Caption Contest Winners
Phishing, anti-shoulder surfing, Russia and other hysterical identity management puns and comments. And the winners are ...
Window Snyder Shares Her Plans for Intel Security
The security leader, known for her role in securing Microsoft, Apple, and Mozilla, discusses her new gig and what she's working on now.
Not All Multifactor Authentication Is Created Equal
Users should be aware of the strengths and weaknesses of the various MFA methods.
Who Do You Trust? Parsing the Issues of Privacy, Transparency & Control
Technology such as Apple's device trust score that decides "you" is “not you” is a good thing. But only if it works well.
California Enacts First-in-Nation IoT Security Law
The new law requires some form of authentication for most connected devices.
FBI IC3 Warns of RDP Vulnerability
Government agencies remind users that RDP can be used for malicious purposes by criminal actors.
The Cloud Security Conundrum: Assets vs. Infrastructure
The issue for cloud adopters is no longer where your data sits in AWS, on-premises, Azure, Salesforce, or what have you. The important questions are: Who has access to it, and how is it protected?
|
The Year in Security: 2019This Tech Digest provides a wrap up and overview of the year's top cybersecurity news stories. It was a year of new twists on old threats, with fears of another WannaCry-type worm and of a possible botnet army of Wi-Fi routers. But 2019 also underscored the risk of firmware and trusted security tools harboring dangerous holes that cybercriminals and nation-state hackers could readily abuse. Read more.
Rethinking Enterprise Data Defense
Frustrated with recurring intrusions and breaches, cybersecurity professionals are questioning some of the industry’s conventional wisdom. Here’s a look at what they’re thinking about.
Tweet This
4 Comments
