Tag: mfa
52 articles
Passkey Adoption Gains Momentum But Trails Behind
The shift away from passwords is gaining speed, but there's still work to be done - passkey adoption nearly doubled in the past year, but hasn't yet reached the finish line. Dashlane's latest report reveals 2.5 million passkey authentications per month and 57% of users storing at least one passkey.
Windows Updates Disrupt Remote Desktop Connections
Recent Windows updates are causing a headache for remote workers, with Remote Desktop connections failing due to a compatibility issue when Administrator protection is enabled. This frustrating error, marked as 0xC000000D, prevents non-administrator users from connecting to devices, leaving teams stuck.
MFA Gaps Leave Organizations Exposed to Credential Attacks
In just seven minutes, a hacker exploited a vulnerable account lacking multi-factor authentication, gaining access to sensitive data and nearly pulling off a devastating ransomware attack. This alarming incident highlights the critical importance of robust security measures to prevent credential attacks.
IonQ Bolsters Cybersecurity with $1.3 Billion Elisity Acquisition
IonQ is supercharging its cybersecurity game with the acquisition of Elisity, a cutting-edge zero-trust network security firm, in a whopping $1.3 billion all-stock deal. This strategic move is a direct response to the rapidly approaching Q-Day threat, with Elisity's innovative access-control capabilities set to turbocharge IonQ's cybersecurity arm.
US Army Wrestles with Zero Trust Identity Challenge
The US Army faces a daunting task: folding 5,000 disparate IT systems into a single, secure platform that verifies the identity of every connected user and device, a crucial step towards achieving Zero Trust Identity by 2027. To get there, they're developing flexible onboarding pathways to bring all systems under one roof.
OAuth Grants Proliferate, Exposing Hidden Risks
The average employee has 88 OAuth grants, with 31 carrying data-level permissions, creating a governance nightmare that's a daily arms race. Unlike other access controls, OAuth grants operate on a separate trust relationship between apps, outliving employee credentials and evading traditional security measures.
Cybersecurity Pros Warn of Password Reliance
Relying on passwords for security is a recipe for disaster, as humans simply can't keep track of multiple complex combinations, leading to reused, shared, or poorly stored passwords. A recent survey found that nearly half of cybersecurity pros still use passwords for personal and work accounts, despite knowing they're one of the least secure authentication methods.
Cybersecurity Pros Expose Persistent Authentication Gap
Despite knowing better, nearly half of cybersecurity pros still rely on vulnerable usernames and passwords to protect their personal and work accounts. This surprising habit persists even though passwords are considered one of the least secure authentication methods.
Zero Trust Vulnerable to Onboarding Attacks
The often-overlooked onboarding process is a glaring weak spot in Zero Trust security, leaving companies vulnerable to attacks that exploit the "Day One window" when new hires are first brought into the environment. Stolen credentials, involved in nearly 45% of breaches, can easily be stolen during this chaotic period when service desk agents are busy activating accounts and issuing initial credentials.
Microsoft Bolsters Entra ID Defenses Against Script Injection Attacks
Microsoft is stepping up Entra ID security by blocking external script injections, starting mid-October 2026, to shield users from potential threats during sign-ins. This move will ensure only trusted scripts from Microsoft's content delivery network can run during authentication.
TeamFiltration Exposes Microsoft 365 Accounts via Default Passwords
A recent TeamFiltration campaign exposed 7 Microsoft 365 accounts with default passwords, highlighting a shocking vulnerability in unmanaged service accounts that can leave businesses open to attack. This incident affected over 5,700 accounts across 28 tenants, with a particular focus on Chilean retail and financial institutions.
Rogue MFA Providers Exploit Entra ID for Password Theft
Security researchers have uncovered a sneaky technique called TrustSink that allows rogue MFA providers to swipe plaintext passwords during seemingly normal login attempts, and they've demonstrated it works with Microsoft Entra ID. This alarming exploit lets attackers get their hands on sensitive passwords, complete with timestamps and source IP addresses.
Microsoft Urges Admins to Migrate Entra ID Users to Phishing-Resistant Auth Methods
Microsoft is sounding the alarm: by February 1, 2027, admins must migrate Entra ID users to phishing-resistant auth methods, as the company will retire SMS and voice authentication, leaving users vulnerable to cyber threats if they don't make the switch.
Public Sector Braces for Identity-Based Attacks
In today's digital landscape, your identity is the key that unlocks access to all your applications and services - making it the new perimeter that public sector organizations must fiercely protect. When identity infrastructure is compromised, attackers can gain a foothold for long-term persistence and privilege escalation, putting entire operations at risk.
Account Recovery Exposes New Attack Path in MFA Defenses
As attackers get thwarted at every login, they're exploiting a glaring weak spot: account recovery processes that can be manipulated to bypass multi-factor authentication defenses. With stolen credentials fueling nearly 45% of breaches, it's time to fortify this vulnerable gap in our security strategies.
Microsoft Unveils Age-Awareness APIs to Enhance Youth Protection in Windows Apps
Microsoft's new Age-Awareness APIs help keep young users safe in Windows apps by providing age ranges without revealing sensitive info like birthdays. This clever tech shares just the right amount of info, so apps know if you're a kid, teen, or adult, without exposing your personal details.
Cyber Firms' AI Defense Push Sparks Scrutiny Over Commitments
More than 200 companies, including tech giants like Microsoft and Google, have joined forces to supercharge cyber defense capabilities and shield against AI-enabled attacks. They're calling for a united front to share threat intel, track progress, and swiftly contain attacks.
WhatsApp Bolsters Sign-In Security with Multi-Device Passkey Support
Big news for WhatsApp users: you can now use multiple passkeys across iOS and Android devices to securely log into your account, making it even easier to protect yourself from phishing and account takeovers. This update allows you to manage multiple credentials directly in the app, streamlining your sign-in experience.
WhatsApp Bolsters Security with Multi-Passkey Support, Enhanced Verification
Boost your WhatsApp security with a game-changing update: you can now set up multiple passkeys across Android and iOS devices, adding an extra layer of protection to your account. Simply head to Settings > Account > Passkeys to get started!
Hackers Exploit MFA Gaps with 155x Surge in Password Spraying Attacks
Hackers are taking advantage of weaknesses in multi-factor authentication, launching a staggering 155 times more password spraying attacks in the first half of 2026. These attacks aren't about fancy new tools, but rather exploiting old authentication paths that slip past security defenses.
Google Cloud Accelerates Post-Quantum Security Push with 2027 Milestone
Google Cloud is proactively bolstering its defenses against future quantum computer threats, aiming to complete a major milestone in its post-quantum security migration by 2027. The tech giant has mapped out a multi-year plan to adopt quantum-resistant cryptography, tackling key risks in data security and digital signatures.
Identity Takes Center Stage in Cybersecurity as Threats Evolve
In today's evolving threat landscape, protecting identity has become the top priority in cybersecurity - treat it like the crown jewels, because it is. By prioritizing identity protection and having a plan in place to recover quickly, organizations can safeguard the foundation of every mission.
Okta Bolsters Identity Security with Permiso Acquisition
Okta is taking identity security to the next level with its acquisition of Permiso Security, bringing together cutting-edge threat detection and response capabilities with its existing identity stack to provide unparalleled protection. This game-changing move will enable Okta to spot and respond to risks that emerge after users, machines, or AI-driven agents have authenticated.
Cyberattacks Expose Gaps in Organizational Readiness
Most organizations are unprepared to tackle a major cyberattack, with a staggering 73% admitting they'd struggle to respond effectively if one hit tomorrow. The real challenge lies not in having the right tools and plans, but in getting them to work seamlessly together under pressure.