Tag: password management
31 articles
School Staff Resist Mandatory Password Change
The school's data manager resisted changing her 1998 password, casually remarking that if she wasn't available, colleagues could simply log in as her to access reports. This lax attitude towards password security was uncovered during an audit that revealed a host of outdated practices, including six-letter passwords with no expiry dates.
Passkey Adoption Gains Momentum But Trails Behind
The shift away from passwords is gaining speed, but there's still work to be done - passkey adoption nearly doubled in the past year, but hasn't yet reached the finish line. Dashlane's latest report reveals 2.5 million passkey authentications per month and 57% of users storing at least one passkey.
Cybersecurity Pros Warn of Password Reliance
Relying on passwords for security is a recipe for disaster, as humans simply can't keep track of multiple complex combinations, leading to reused, shared, or poorly stored passwords. A recent survey found that nearly half of cybersecurity pros still use passwords for personal and work accounts, despite knowing they're one of the least secure authentication methods.
Cybersecurity Pros Expose Persistent Authentication Gap
Despite knowing better, nearly half of cybersecurity pros still rely on vulnerable usernames and passwords to protect their personal and work accounts. This surprising habit persists even though passwords are considered one of the least secure authentication methods.
UK.gov Deploys Passkeys for 23 Million Users
Say goodbye to password headaches! The UK government just made it easier for 23 million people to securely access public services with passkeys, as part of its GOV.UK One Login rollout.
Snowflake Tackles Identity Debt as Passwords Lose Favor
The alarming rise of identity debt has led Snowflake to take a bold stance against outdated password practices, proactively tackling the vulnerabilities that leave businesses exposed. By phasing out password authentication, Snowflake is revolutionizing identity debt management and setting a new standard for secure data protection.
Password Books Make Comeback as Low-Tech Security Option
In a world where digital security breaches are on the rise, a simple, low-tech solution is making a surprising comeback: password books, now available for just AU$4.90 at AusPost branches in Australia. These compact books offer a practical, old-school way to store your credentials - but do they offer a secure solution?
Phishers Target LastPass, Bitwarden Users with Fake Security Alerts
Beware of fake security alerts! LastPass and Bitwarden users are being targeted by phishers with convincing emails that mimic real corporate communications, trying to trick you into visiting fraudulent websites.
CEO's Password Practice Exposes Firm to Breach Risk
A CEO's outdated password policy left his 2,000-strong company vulnerable to a potential data breach, after he stored all employee usernames and passwords in a single Excel spreadsheet on his desktop. This alarming security risk was only resolved after months of persistence, when the IT team proved they could manage messages centrally without needing everyone's login details.
Apple Unveils AI-Powered Tool to Automatically Secure Compromised Passwords
Say goodbye to password anxiety with Apple's latest innovation - an AI-powered tool that automatically secures compromised passwords, giving you peace of mind with just a few clicks. This game-changing feature, part of Apple Intelligence, uses AI to update weak and vulnerable credentials to strong, unguessable passwords.
Dashlane Exposes Brute-Force Attack on User Accounts
Dashlane recently alerted a small group of users, fewer than 20, that an external threat actor had launched a brute-force attack on their accounts, attempting to bypass two-factor authentication and gain unauthorized access. The company quickly sprang into action, notifying affected users and taking steps to protect their accounts.
Dashlane Bolsters Defenses After Brute Force Attacks Lock Out Users
Dashlane recently thwarted a brute force attack that temporarily locked out some users, but swift action ensured their accounts were quickly restored. The company has since bolstered its defenses and is closely monitoring the situation to prevent future incidents.
Dashlane Disrupts Service Amid Brute-Force Attacks
Dashlane recently took swift action to protect its users, suspending customer accounts in response to a surge of brute-force attacks that triggered the company's automatic defenses, putting engineers' weekends on hold. This decisive move showcases the password manager's commitment to safeguarding user security.
Strengthening Active Directory Password Rules Without Frustrating Users
Want to boost your Active Directory password security without driving users crazy? Ditch outdated complexity rules and switch to passphrases - longer, multi-word passwords that are easier to remember and harder for hackers to crack.
CISA Exposes Security Lapse with Open GitHub Repository
The US's leading cyber-defense agency, CISA, made a shocking security blunder by leaving a GitHub repository open, exposing sensitive passwords, keys, and tokens with alarmingly obvious filenames. This careless mistake raises serious concerns about the agency's ability to protect itself and the nation from cyber threats.
Active Directory Breaches Persist After Password Resets
Resetting passwords isn't enough to keep hackers at bay, especially in Active Directory environments where cached credentials and sync delays can leave gaping security holes. Even after a password reset, attackers can still find ways to exploit outdated credentials and gain unauthorized access.
Microsoft Edge Exposes Saved Passwords in Plaintext
Microsoft Edge's password management has a concerning vulnerability: it loads all saved passwords into browser memory in plaintext at startup, making it easier for hackers to steal credentials on compromised systems. This is in stark contrast to other Chromium-based browsers like Google Chrome and Brave, which only decrypt passwords when needed.
Weak Passwords Expose Networks to Unintended Access
Even a seasoned expert like Roger Grimes, CISO advisor at KnowBe4, has fallen victim to the pitfalls of weak passwords - in a surprising turn of events, he recalling a time when he accidentally gained access to a client's network using the password "rosebud", famously lifted from a film plot.
UK Urges Adoption of Passkeys Over Passwords
Say goodbye to password headaches! The UK is leading the charge towards a more secure and user-friendly login experience with passkeys, which offer stronger resilience and eliminate many common cyber threats.
Weak Passwords Expose Firms to Data Loss Risk
One careless decision - using the same easily-guessable password across multiple environments - left a client vulnerable to disaster, despite a hefty investment in security tools. A simple password like "admin123" pinned in a shared Slack channel created a single point of failure that put the entire system at risk.
NCSC Endorses Passkeys Over Passwords in New Guidance
Say goodbye to password headaches! The UK's National Cyber Security Centre now recommends passkeys as a user-friendly alternative that provides stronger resilience, making it easier to log in securely.
authentication bypass: Urgent Critical Emergency Flaw
Could a single click hand a stranger the keys to your vault? Click Studios has rushed a patch for a Passwordstate flaw that can create an emergency admin account — if you use Passwordstate, patch immediately, assume possible compromise, and check for unauthorized accounts.
Passwork 7 Review How It Secures and Simplifies Business Passwords
Struggling to keep your business passwords safe and manageable? Passwork 7 makes securing digital keys effortless with powerful, role-based controls and top-notch encryption designed for today’s security challenges.
Is Your Password System Prepared for Regulatory Compliance?
Ensure your password system meets regulatory compliance standards. Discover key strategies to safeguard data and avoid penalties.