Expert insights. Personalized for you.
Microsoft announced that users can access their consumer accounts without providing passwords and using more secure authentication methods. SecurityAffairs – hacking, passwordless authentication). MORE
A Study on Usability and Security Perceptions of Risk-based Authentication “: Abstract : Risk-based Authentication (RBA) is an adaptive security measure to strengthen password-based authentication. I’ve blogged about risk-based authentication before. MORE
Cisco NFV Infrastructure Software Users Urged to Patch Immediately Cisco has released an urgent software update to fix a critical authentication bug that can allow an unauthenticated, remote attacker to bypass authentication and log in to an affected device as an administrator MORE
158 
Although they are the most common tool used to verify a person’s identity, passwords are the least secure mode of authentication. What is passwordless authentication? Passwordless authentication, on the other hand, is derived from different types of information the user has. MORE
Wells Fargo's Sridhar Sidhu on Redefining IAM for Remote Workforce Organizations with largely remote workforces must strengthen their dynamic authentication processes to enhance security, says Sridhar Sidhu, senior vice president and head of the information security services group at Wells Fargo MORE
your organization can now lean on multi-factor authentication (MFA) to secure HTML5-based terminal emulator access. BlueZone web allows users to have their first point of authentication as an internal user, LDAP registered user or MS SQL User. MORE
Strategist Coby Montoya Discusses Leveraging Behavioral Biometrics to Fight Fraud With consumers relying more heavily on e-commerce during the pandemic and beyond, leveraging behavioral biometrics for authentication is an effective strategy, says Coby Montoya, a fraud-fighting and authentication strategist at a financial company. MORE
174 
The concept of identity has been around for decades, yet authentication has not caught up to its advanced threats until now. Here are four ways to begin thinking differently about identity and authentication MORE
Zoho urges customers to address an authentication bypass vulnerability in its ManageEngine ADSelfService Plus that is actively exploited in the wild. “We have addressed an authentication bypass vulnerability affecting the REST API URLs in ADSelfService Plus. MORE
IBM Researchers Describe How 'TrickMo,' a TrickBot Variant, Works A variant of the TrickBot Trojan bypasses two-factor authentication for mobile banking, for example, by intercepting one-time codes sent over SMS, according to IBM X-Force MORE
142 Implementing an adaptive, risk-based authentication process for remote system access is proving effective as more staff members work from home during the COVID-19 pandemic, says Ant Allan, a vice president and analyst at Gartner MORE
Roger Grimes on why multifactor authentication isn’t a panacea : The first time I heard of this issue was from a Midwest CEO. Uncategorized authentication phishing ransomware social engineering two-factor authentication MORE
Phil Dunkelberger of Nok Nok Labs Discusses Evolving Payment Fraud Schemes As e-commerce explodes during the global CIVD-19 pandemic, transaction authentication is more critical for fraud prevention, says Phil Dunkelberger of Nok Nok Labs, who discusses the latest fraud trends MORE
142 
The Kaseya ransomware attack is believed to have been down to an authentication bypass. Yes, ransomware needs to be on your radar -- but good authentication practices are also imperative MORE
Uncategorized authentication impersonationThis is a weird story of a building owner commissioning an artist to paint a mural on the side of his building — except that he wasn’t actually the building’s owner. MORE
Joni Brennan of Canadian ID Council on How IAM Capabilities Must Evolve "Multisectoral" authentication can help to ensure that government benefits are provided to the right recipients, says Joni Brennan, president of the Digital ID & Authentication Council of Canada MORE
Logs from the Exchange server showed that the attacker provided username and password authentication like normal but were not challenged for a second factor through Duo. After successful password authentication, the server evaluated the duo-sid cookie and determined it to be valid. MORE
says it will soon force all Cloud Solution Providers (CSPs) that help companies manage their Office365 accounts to use multi-factor authentication. As it happened, the PCM employee was not using multi-factor authentication. In response, Microsoft said while its guidance has always been for partners to enable and require multi-factor authentication for all administrators or agent users in the partner tenants, it would soon be making it mandatory. MORE
Tim Bedard of OneSpan answers this question in his analysis of ISMG's new State of Adaptive Authentication in Banking survey OneSpan's Tim Bedard Analyzes New Banking Security Survey How well can banking institutions apply the right amount of security to the right transactions at the right time? MORE
Enterprises today have many digital ways of interacting with their customers - and therefore just as many ways for authenticating those users and transactions. Sesh Venkataraman of CA Technologies explains the business value of omnichannel authentication solutions MORE
117 
” Abstract: A master face is a face image that passes face-based identity-authentication for a large portion of the population. Uncategorized academic papers authentication face recognition MORE
Company's Action Follows Similar Move by Google Nest Amazon's Ring is mandating the use of two-factor authentication for all users, a move designed to help stop creepy takeovers of the web-connected home security cameras. MORE
Stresses Need for MFA, Stronger Access Controls The FFIEC has issued updated guidance advising banks to use stronger access controls and multifactor authentication. MORE
Smart & Adaptive MFA for the Modern Campus View this webinar as we discuss multi-factor authentication for the evolving campus community MORE
In an interview, Rohas Nagpal, a chief architect at Primechain Technologies, describes how blockchain can be used for authentication and pinpoints areas where blockchain is not the ideal technology. He'll be a featured speaker at ISMG's Security Summit in Mumbai Thursday MORE
This traditional authentication method is challenging to get rid of, mostly because it’s so common. And for businesses, transitioning to new authentication solutions can be expensive and time-consuming. It supports standards that make implementing newer, stronger authentication methods possible for businesses. It enables end users to authenticate to online sites and applications both on mobile and desktop through WebAuthn and CTAP. MORE
Balancing Made Easier It is a simple fact that strong authentication will impact user experience and effectiveness MORE
Threat Actors Using Social Engineering, Other Technical Techniques to Circumvent MFA Protections The FBI is warning banks, businesses and other organizations that cybercriminals are using social engineering and other technical techniques to circumvent multifactor authentication security protections MORE
Shane Weeden, and authentication expert with IBM Security, discusses the future of authentication and why he's encouraged by the FIDO2 initiative As we approach 2019, is it realistic to think the end of our dependency on traditional user names and passwords is in sight? MORE
OneSpan's Tim Bedard on Evolutionary Strategies and Controls The right authentication controls at the right time for the right transactions - the adaptive authentication message is taking off, says OneSpan's Tim Bedard. And here are some quick wins organizations might focus on when starting down the path MORE
131 Enterprises today have many digital ways of interacting with their customers - and therefore just as many ways for authenticating those users and transactions. Sesh Venkataraman of CA Technologies explains the business value of omnichannel authentication solutions MORE
136 Passwords are the most common authentication tool used by enterprises, yet they are notoriously insecure and easily hackable. At this point, multi-factor authentication (MFA) has permeated most applications, becoming a minimum safeguard against attacks. Biometric authentication. MORE
Jamf Connect expands secure identity and access to resources with Jamf Unlock, passwordless authentication from an iPhone app to securely unlock Mac and the resources needed to be productive MORE
Enterprises today have many digital ways of interacting with their customers - and therefore just as many ways for authenticating those users and transactions. Sesh Venkataraman of CA Technologies explains the business value of omnichannel authentication solutions MORE
117 
Underground services are cropping up that are designed to enable bad actors to intercept one-time passwords (OTPs), which are widely used in two-factor authentication programs whose purpose is to better protect customers’ online accounts. Threats anti-phishing multi-factor authentication MORE
Streamlining and Enhancing Authentication for the Workforce Many organizations have updated the authentication process for customers to help ensure frictionless transactions. MORE
153 
Navy Federal Credit Union’s Thomas Malta on Applying CIAM Techniques New authentication models, including dynamic authorization and continuous authentication, that work well for consumers can be adopted for employees as well, says Thomas Malta, head of identity and access management at the Virginia-based Navy Federal Credit Union. MORE
The NSA has published an advisory outlining how “malicious cyber actors” are “are manipulating trust in federated authentication environments to access protected data in the cloud.” Uncategorized authentication credentials hacking NSA trust MORE
Authentication Related Topics Schneier on Security
OCTOBER 21, 2021
Roger Grimes on why multifactor authentication isn’t a panacea : The first time I heard of this issue was from a Midwest CEO. Uncategorized authentication phishing ransomware social engineering two-factor authentication
Data Breach Today
MARCH 4, 2021
Navy Federal Credit Union’s Thomas Malta on Applying CIAM Techniques New authentication models, including dynamic authorization and continuous authentication, that work well for consumers can be adopted for employees as well, says Thomas Malta, head of identity and access management at the Virginia-based Navy Federal Credit Union.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Data Breach Today
AUGUST 16, 2021
Stresses Need for MFA, Stronger Access Controls The FFIEC has issued updated guidance advising banks to use stronger access controls and multifactor authentication.
Data Breach Today
JANUARY 7, 2021
Joni Brennan of Canadian ID Council on How IAM Capabilities Must Evolve "Multisectoral" authentication can help to ensure that government benefits are provided to the right recipients, says Joni Brennan, president of the Digital ID & Authentication Council of Canada
Advertiser: ZoomInfo
As buyer expectations continue to heighten, marketing and sales teams are feeling pressured to deliver authentic messaging to buyers at every point of their customer journey. This report aims to highlight the current state of B2B database and contact acquisition strategies, and organizations’ goals to leverage data to fuel their go-to-market strategies in 2020 and beyond.
Data Breach Today
MAY 4, 2021
Strategist Coby Montoya Discusses Leveraging Behavioral Biometrics to Fight Fraud With consumers relying more heavily on e-commerce during the pandemic and beyond, leveraging behavioral biometrics for authentication is an effective strategy, says Coby Montoya, a fraud-fighting and authentication strategist at a financial company.
Data Breach Today
SEPTEMBER 4, 2021
Cisco NFV Infrastructure Software Users Urged to Patch Immediately Cisco has released an urgent software update to fix a critical authentication bug that can allow an unauthenticated, remote attacker to bypass authentication and log in to an affected device as an administrator
Schneier on Security
DECEMBER 14, 2020
Uncategorized authentication impersonationThis is a weird story of a building owner commissioning an artist to paint a mural on the side of his building — except that he wasn’t actually the building’s owner.
Data Breach Today
AUGUST 19, 2020
Implementing an adaptive, risk-based authentication process for remote system access is proving effective as more staff members work from home during the COVID-19 pandemic, says Ant Allan, a vice president and analyst at Gartner
Security Affairs
SEPTEMBER 15, 2021
Microsoft announced that users can access their consumer accounts without providing passwords and using more secure authentication methods. SecurityAffairs – hacking, passwordless authentication).
Advertiser: ZoomInfo
What is conversational marketing really about? This guide will examine the market forces at play, shifting buyer trends, how to leverage conversation marketing, and the tactics involved in adopting it for a B2B demand generation strategy.
|
Data Breach Today
MARCH 26, 2021
Streamlining and Enhancing Authentication for the Workforce Many organizations have updated the authentication process for customers to help ensure frictionless transactions.
Schneier on Security
AUGUST 6, 2021
” Abstract: A master face is a face image that passes face-based identity-authentication for a large portion of the population. Uncategorized academic papers authentication face recognition
Data Breach Today
MARCH 10, 2021
Smart & Adaptive MFA for the Modern Campus View this webinar as we discuss multi-factor authentication for the evolving campus community
eSecurity Planet
OCTOBER 5, 2021
Passwords are the most common authentication tool used by enterprises, yet they are notoriously insecure and easily hackable. At this point, multi-factor authentication (MFA) has permeated most applications, becoming a minimum safeguard against attacks. Biometric authentication.
Advertisement
Understanding your data security needs is tough enough, but what can be even more difficult is choosing the right software to fit your company. This checklist will help you evaluate the scope of services offered by various encryption solutions on the market.
Security Affairs
SEPTEMBER 8, 2021
Zoho urges customers to address an authentication bypass vulnerability in its ManageEngine ADSelfService Plus that is actively exploited in the wild. “We have addressed an authentication bypass vulnerability affecting the REST API URLs in ADSelfService Plus.
Schneier on Security
DECEMBER 15, 2020
Logs from the Exchange server showed that the attacker provided username and password authentication like normal but were not challenged for a second factor through Duo. After successful password authentication, the server evaluated the duo-sid cookie and determined it to be valid.
Dark Reading
OCTOBER 1, 2021
The concept of identity has been around for decades, yet authentication has not caught up to its advanced threats until now. Here are four ways to begin thinking differently about identity and authentication
Data Breach Today
FEBRUARY 19, 2020
Company's Action Follows Similar Move by Google Nest Amazon's Ring is mandating the use of two-factor authentication for all users, a move designed to help stop creepy takeovers of the web-connected home security cameras.
Dark Reading
JULY 8, 2021
The Kaseya ransomware attack is believed to have been down to an authentication bypass. Yes, ransomware needs to be on your radar -- but good authentication practices are also imperative
Data Breach Today
NOVEMBER 27, 2018
In an interview, Rohas Nagpal, a chief architect at Primechain Technologies, describes how blockchain can be used for authentication and pinpoints areas where blockchain is not the ideal technology. He'll be a featured speaker at ISMG's Security Summit in Mumbai Thursday
Data Breach Today
MAY 3, 2019
Enterprises today have many digital ways of interacting with their customers - and therefore just as many ways for authenticating those users and transactions. Sesh Venkataraman of CA Technologies explains the business value of omnichannel authentication solutions
Jamf
JUNE 14, 2021
Jamf Connect expands secure identity and access to resources with Jamf Unlock, passwordless authentication from an iPhone app to securely unlock Mac and the resources needed to be productive
Data Breach Today
JANUARY 15, 2021
Wells Fargo's Sridhar Sidhu on Redefining IAM for Remote Workforce Organizations with largely remote workforces must strengthen their dynamic authentication processes to enhance security, says Sridhar Sidhu, senior vice president and head of the information security services group at Wells Fargo
Krebs on Security
JUNE 28, 2019
says it will soon force all Cloud Solution Providers (CSPs) that help companies manage their Office365 accounts to use multi-factor authentication. As it happened, the PCM employee was not using multi-factor authentication. In response, Microsoft said while its guidance has always been for partners to enable and require multi-factor authentication for all administrators or agent users in the partner tenants, it would soon be making it mandatory.
Data Breach Today
MAY 31, 2019
OneSpan's Tim Bedard on Evolutionary Strategies and Controls The right authentication controls at the right time for the right transactions - the adaptive authentication message is taking off, says OneSpan's Tim Bedard. And here are some quick wins organizations might focus on when starting down the path
The Last Watchdog
DECEMBER 6, 2021
This traditional authentication method is challenging to get rid of, mostly because it’s so common. And for businesses, transitioning to new authentication solutions can be expensive and time-consuming. It supports standards that make implementing newer, stronger authentication methods possible for businesses. It enables end users to authenticate to online sites and applications both on mobile and desktop through WebAuthn and CTAP.
Data Breach Today
JULY 26, 2019
Enterprises today have many digital ways of interacting with their customers - and therefore just as many ways for authenticating those users and transactions. Sesh Venkataraman of CA Technologies explains the business value of omnichannel authentication solutions
Data Breach Today
JULY 29, 2019
Balancing Made Easier It is a simple fact that strong authentication will impact user experience and effectiveness
Data Breach Today
JUNE 10, 2019
Enterprises today have many digital ways of interacting with their customers - and therefore just as many ways for authenticating those users and transactions. Sesh Venkataraman of CA Technologies explains the business value of omnichannel authentication solutions
Data Breach Today
MARCH 25, 2020
IBM Researchers Describe How 'TrickMo,' a TrickBot Variant, Works A variant of the TrickBot Trojan bypasses two-factor authentication for mobile banking, for example, by intercepting one-time codes sent over SMS, according to IBM X-Force
Data Breach Today
APRIL 1, 2019
Tim Bedard of OneSpan answers this question in his analysis of ISMG's new State of Adaptive Authentication in Banking survey OneSpan's Tim Bedard Analyzes New Banking Security Survey How well can banking institutions apply the right amount of security to the right transactions at the right time?
Data Breach Today
APRIL 20, 2020
Phil Dunkelberger of Nok Nok Labs Discusses Evolving Payment Fraud Schemes As e-commerce explodes during the global CIVD-19 pandemic, transaction authentication is more critical for fraud prevention, says Phil Dunkelberger of Nok Nok Labs, who discusses the latest fraud trends
Schneier on Security
DECEMBER 18, 2020
The NSA has published an advisory outlining how “malicious cyber actors” are “are manipulating trust in federated authentication environments to access protected data in the cloud.” Uncategorized authentication credentials hacking NSA trust
eSecurity Planet
MARCH 31, 2021
Although they are the most common tool used to verify a person’s identity, passwords are the least secure mode of authentication. What is passwordless authentication? Passwordless authentication, on the other hand, is derived from different types of information the user has.
Data Breach Today
OCTOBER 9, 2019
Threat Actors Using Social Engineering, Other Technical Techniques to Circumvent MFA Protections The FBI is warning banks, businesses and other organizations that cybercriminals are using social engineering and other technical techniques to circumvent multifactor authentication security protections
Rocket Software
JULY 24, 2020
your organization can now lean on multi-factor authentication (MFA) to secure HTML5-based terminal emulator access. BlueZone web allows users to have their first point of authentication as an internal user, LDAP registered user or MS SQL User.
Data Breach Today
NOVEMBER 6, 2018
Shane Weeden, and authentication expert with IBM Security, discusses the future of authentication and why he's encouraged by the FIDO2 initiative As we approach 2019, is it realistic to think the end of our dependency on traditional user names and passwords is in sight?
eSecurity Planet
SEPTEMBER 30, 2021
Underground services are cropping up that are designed to enable bad actors to intercept one-time passwords (OTPs), which are widely used in two-factor authentication programs whose purpose is to better protect customers’ online accounts. Threats anti-phishing multi-factor authentication
Let's personalize your content