article thumbnail

E-Verify’s “SSN Lock” is Nothing of the Sort

Krebs on Security

After verifying my email address, I was asked to pick a strong password and select a form of multi-factor authentication (MFA). Password reset questions selected, the site proceeded to ask four, multiple-guess “knowledge-based authentication” questions to verify my identity.

Passwords 295
article thumbnail

Experian, You Have Some Explaining to Do

Krebs on Security

In both cases the readers used password managers to select strong, unique passwords for their Experian accounts. Turner said he created the account at Experian in 2020 to place a security freeze on his credit file, and that he used a password manager to select and store a strong, unique password for his Experian account.

Passwords 316
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

GUEST ESSAY: Why corporate culture plays such a pivotal role in deterring data breaches

The Last Watchdog

A knowledge-base that’s understandable and accessible to all staff. Well thought-out protocols related to access control, breach management, and device usage. On a strong password policy and an authentication process that doesn’t impede your workers. Amidst all this, make sure you also focus on the basics.

article thumbnail

I'm Testifying in Front of Congress in Washington DC about Data Breaches - What Should I Say?

Troy Hunt

But it's exactly what it sounds like and on Thursday next week, I'll be up in front of US congress on the other side of the world testifying about the impact of data breaches. For a bit more context, I've been chatting with folks from the House Energy and Commerce Committee for a while now about the mechanics of data breaches.

article thumbnail

Episode 247: Into the AppSec Trenches with Robinhood CSO Caleb Sima

The Security Ledger

Related Stories Episode 243: The CSTO is a thing- a conversation with Chris Hoff of LastPass Episode 245: How AI is remaking knowledge-based authentication Episode 244: ZuoRAT brings APT Tactics to Home Networks. As Mobile Fraud Rises, The Password Persists. Once more unto the (data) breach!

article thumbnail

Ways to Develop a Cybersecurity Training Program for Employees

Security Affairs

While you may disagree, data breach studies show that employees and negligence are the most typical causes of security breaches, yet these prevalent issues are least discussed. According to another study by CybSafe, human errors have been responsible for over 90% of data breaches in 2020.

article thumbnail

MyEquifax.com Bypasses Credit Freeze PIN

Krebs on Security

In the wake of Equifax’s epic 2017 data breach impacting some 148 million Americans, many people did freeze their credit files at the big three in response. The portal asked me for an email address and suggested a longish, randomized password, which I accepted. Consumers in every U.S. In fact, it was too easy.