Collaborate Disseminate
The apparent ease with which SIM hijacking attacks are being perpetrated to get the targets’ second authentication factor for crucial accounts (online banking, cryptocurrency exchange, online wallet) must have raised some doubts about the securit… Continue reading Microsoft: Any form of MFA takes users out of reach of most attacks
The popularity of Google’s Password Checkup Chrome extension has spurred the company to build the technology into Google Account’s Password Manager and the Chrome browser. Unlike the Chrome extension, these new implementations won’t just po… Continue reading Google adds Password Checkup feature to Google Accounts, Chrome
As more U.S. consumers use digital platforms when engaging with insurance companies, new fraud challenges are likely to arise for insurance carriers, according to TransUnion and iovation. Among the 10 billion global online transactions iovation screene… Continue reading As consumers engage with insurance companies online, new types of digital fraud emerge
From January 2019 through June 2019, LexisNexis Risk Solutions recorded 16.4 billion transactions, of which 277 million were human-initiated attacks, a 13% increase over the second half of 2018. The report highlights a shift toward networked, cross-org… Continue reading Fraudsters no longer operate in silos, they are attacking across industries and organizations
GitHub has started supporting the Web Authentication (WebAuthn) web standard, allowing users to use security keys for two-factor authentication with a wide variety of browsers and devices. New possibilities Developer accounts at online code and softwar… Continue reading GitHub announces wider array of 2FA options, including security keys and biometrics
Google is rolling out new security options for G Suite users and admins, aimed at alerting organizations about data exfiltration attempts on Google Drive and helping them protect their high-risk users. The options are both still in beta and some are cu… Continue reading G Suite news: Anomalous alert activity for Google Drive, Advanced Protection for enterprise users
Google has discovered that it has been storing some G Suite users’ passwords in clear text and is notifying G Suite administrators that it will force a password change if the affected passwords haven’t been changed in the meantime. What hap… Continue reading Google has been storing unhashed G Suite customer passwords
Despite implementation bugs that might affect the security of physical security keys, they are the strongest protection against phishing currently available, Google maintains. On-device prompts and SMS codes are also extremely successful at blocking ac… Continue reading How effective are login challenges at preventing Google account takeovers?
Misconfigured Bluetooth pairing protocols in Google’s Titan Security Keys may allow attackers to communicate with users’ security key or with the device their key is paired with, Google has warned. The bug can’t be fixed with a securi… Continue reading Google offers free replacement for buggy Titan Security Keys
64% of people use the same password for some, or even all, of their online accounts, while only 21% use a different password for each account. These startling findings come from a survey of 1,050 people in the UK carried out by Bilendi on behalf Europe… Continue reading Despite warnings, most people still don’t change their passwords