Security Experts:

long dotted

NEWS & INDUSTRY UPDATES

Facebook has announced new privacy and security features for Messenger, including App Lock and a new Privacy settings section. [Read More]
Researchers disclose the details of Shadow Attacks, new methods for hiding and replacing content in signed PDF files without invalidating their signature. [Read More]
Cybersecurity company Fortinet has acquired Secure Access Service Edge (SASE) cloud provider OPAQ Networks. [Read More]
Mozilla is the latest browser maker to have announced updated policies that would reduce the lifetime of TLS certificates. [Read More]
Cyberattack simulation company XM Cyber has raised $17 million in a Series B funding round, which brings the total raised to $49 million. [Read More]
Digital Shadows has found over 15 billion username and password combinations offered on cybercrime marketplaces, including more than 5 billion unique credentials. [Read More]
The NSA has published a series of recommendations on how to properly configure IP Security (IPsec) VPNs. [Read More]
An Elasticsearch database pertaining to e-learning platform OneClass was found to expose data on over one million students and lecturers. [Read More]
Companies believe strong authentication is important, but they still over-rely on passwords and allow their employees to access corporate resources via social media credentials. [Read More]
Twitter has informed business users that their billing information may have been exposed through their web browser’s cache. [Read More]

FEATURES, INSIGHTS // Identity & Access

rss icon

Torsten George's picture
The tactics, techniques, and procedures (TTPs) used in the Twitter attack were not much different than in the majority of other data breaches and serve as valuable lessons for designing a modern cyber defense strategy.
Jim Ducharme's picture
Let’s look at some real-world examples of the identity management challenges remote work is creating, and at what it means to rethink identity governance and lifecycle to meet those challenges.
Torsten George's picture
The integration of identity with security is still work in progress, with less than half of businesses having fully implemented key identity-related access controls according to a research study.
Torsten George's picture
Today’s economic climate exacerbates risks of insider threats, as pending furloughs or pay cuts may tempt employees to exfiltrate data to secure a new job, make up for income losses, etc.
Torsten George's picture
With IT budgets being cut back in response to the economic contraction caused by the current health crisis, security teams need to deliver more with less.
Torsten George's picture
Static passwords lack the ability to verify whether the user accessing data is authentic or just someone who bought a compromised password.
Jim Ducharme's picture
If there’s one thing you can be sure of about user authentication methods today, it’s that determining the best choice isn’t as simple or straightforward as it used to be.
Josh Lefkowitz's picture
As the technology and tools to leverage stolen credentials advance, defenders should seek out innovative new ways to proactively flag exposed passwords leveraging insights gleaned from illicit communities and open-web dumps.
Jim Ducharme's picture
As the workforce continues to evolve, a one-size-fits-all approach won’t work for different identity and access management needs across organizations.
Torsten George's picture
Perimeter-based security, which focuses on securing endpoints, firewalls, and networks, provides no protection against identity- and credential-based threats.