Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Identity & Access

Google to Offer Stepped-up Security For ‘High Risk’ Users

Google said Tuesday it would offer stronger online security for “high risk” users who may be frequent targets of online attacks.

The US technology titan said anyone with a personal Google account can enroll in the new “advanced protection,” while noting that it will require users to “trade off a bit of convenience” for extra security.

Google said Tuesday it would offer stronger online security for “high risk” users who may be frequent targets of online attacks.

The US technology titan said anyone with a personal Google account can enroll in the new “advanced protection,” while noting that it will require users to “trade off a bit of convenience” for extra security.

“We took this unusual step because there is an overlooked minority of our users that are at particularly high risk of targeted online attacks,” said a Google security blog post.

“For example, these might be campaign staffers preparing for an upcoming election, journalists who need to protect the confidentiality of their sources, or people in abusive relationships seeking safety.”

Google will require these users to log into their accounts with a physical USB key which will be part of two-factor authentication, to guard against fraudulent access.

“An attacker who doesn’t have your security key is automatically blocked, even if they have your password,” the statement said.

Google will provide additional monitoring for these accounts and limit access to sensitive applications, aiming to protect against impersonation and “phishing” to gain access to an account.

Advertisement. Scroll to continue reading.

“Sometimes even the most careful and security-minded users are successfully attacked through phishing scams, especially if those phishing scams were individually targeted at the user in question,” the company said.

Phishing is the use of deception to gain confidential information such as usernames, passwords, bank account details and credit card numbers.

In one of the most highly publicized phishing attacks, Hillary Clinton’s campaign chairman John Podesta gave up his password to a hacker, resulting in a series of embarrassing leaks during the 2016 presidential race.

Written By

AFP 2023

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

SecurityWeek’s Threat Detection and Incident Response Summit brings together security practitioners from around the world to share war stories on breaches, APT attacks and threat intelligence.

Register

Securityweek’s CISO Forum will address issues and challenges that are top of mind for today’s security leaders and what the future looks like as chief defenders of the enterprise.

Register

Expert Insights

Related Content

Identity & Access

Zero trust is not a replacement for identity and access management (IAM), but is the extension of IAM principles from people to everyone and...

Identity & Access

Hackers rarely hack in anymore. They log in using stolen, weak, default, or otherwise compromised credentials. That’s why it’s so critical to break the...

Application Security

Fortinet on Monday issued an emergency patch to cover a severe vulnerability in its FortiOS SSL-VPN product, warning that hackers have already exploited the...

Application Security

Virtualization technology giant VMware on Tuesday shipped urgent updates to fix a trio of security problems in multiple software products, including a virtual machine...

Application Security

Password management firm LastPass says the hackers behind an August data breach stole a massive stash of customer data, including password vault data that...

Application Security

Microsoft on Tuesday pushed a major Windows update to address a security feature bypass already exploited in global ransomware attacks.The operating system update, released...

Application Security

Electric car maker Tesla is using the annual Pwn2Own hacker contest to incentivize security researchers to showcase complex exploit chains that can lead to...

Identity & Access

NSA publishes recommendations on maturing identity, credential, and access management capabilities to improve cyberthreat protections.