Authentication

Dark Reading's digest of the other don't-miss stories of the week, including YouTube account takeovers and a sad commentary on cyber-pro hopelessness.

The hacktivist group is ramping up its activities and ready to assault governments and businesses with escalating capabilities.

With more staff working remotely, identity, authentication, and access (IAA) has never been more important. Microsoft has a new response.

The clever, interactive phishing campaign is a sign of increasingly complex social-engineering attacks, researchers warn.

The credential-phishing attack leverages social engineering and brand impersonation techniques to lead users to a spoofed MetaMask verification page.

We as industry leaders should be building on what individual platforms like GitHub are doing in two critical ways: demanding third parties improve security and creating more interoperable architectures.

RSOCKS commandeered millions of devices in order to offer proxy services used to mask malicious traffic.

Username and password combinations offered for sale on the Dark Web by criminals has increased 65% since 2020.

SSO's one-to-many architecture is both a big advantage and a weakness.

Cloud migration, DevSecOps, cyber insurance, and more have emerged as important motivators for cybersecurity investment and focus.

A full 77% of tech executives say they'll increase spending in zero-trust architecture in the coming year.

The cloud instances were left open to the public Internet with no authentication, allowing attackers to wipe the data.

To succeed against dynamic cybercriminals, organizations must go multiple steps further and build a learning system that evolves over time to keep up with attacker tactics.

A decentralized future is a grand ideal, but secure management of private keys is the prerequisite to ensure the integrity of decentralized applications and services.

The same attack that allowed a threat actor to steal data from private Heroku GitHub repositories also resulted in the compromise of customer credentials, the company now says.