KnowBe4 Brings Artificial Intelligence to Security Awareness Training

It seems that you cannot have a new security product without a machine learning component. It makes sense. Machine learning recognizes patterns and returns probabilities. Risk, and cyber security is all about risk, is also about patterns and probabilit… Continue reading KnowBe4 Brings Artificial Intelligence to Security Awareness Training

Researchers Find ‘Authentication Weakness’ in Apple’s Device Enrollment Program

Researchers from Duo Security have discovered a vulnerability (it calls it an ‘authentication weakness’) in Apple’s Device Enrollment Program (DEP). The flaw was reported to Apple in May 2018. It is not considered to be a major flaw, but could potentia… Continue reading Researchers Find ‘Authentication Weakness’ in Apple’s Device Enrollment Program

Credential Stuffing Attacks Are Reaching DDoS Proportions

Credential stuffing is a growing threat. It is not new, but for many companies it is treated as annoying background noise that can be absorbed by bandwidth, handled by access controls, and ignored. New figures suggest that this is a bad approach.
read … Continue reading Credential Stuffing Attacks Are Reaching DDoS Proportions