Category Archives: MFA

Who owns customer identity?

Posted on by

When I’m talking with prospective clients, I like to ask: which department owns customer identity? Everyone immediately looks towards a different team. While every team touches customer identity at some point, the teams that own it differ from organiza… Continue reading Who owns customer identity?→

Cisco Duo provider breached, SMS MFA logs compromised

Posted on by

Hackers have managed to compromise a telephony provider for Duo, the Cisco-owned company providing secure access solutions, and steal MFA (multi-factor authentication) SMS message logs of Duo customers. About the attack The unnamed provider – one… Continue reading Cisco Duo provider breached, SMS MFA logs compromised→

Cisco Duo Says Hack at Telephony Supplier Exposed MFA SMS Logs

Posted on by

Cisco Duo warns that breach exposed phone numbers, phone carriers, metadata and other logs that could lead to downstream social engineering attacks.
The post Cisco Duo Says Hack at Telephony Supplier Exposed MFA SMS Logs appeared first on SecurityWeek.
Continue reading Cisco Duo Says Hack at Telephony Supplier Exposed MFA SMS Logs→

Strengthening defenses against nation-state and for-profit cyber attacks

Posted on by

There is an urgent need to secure tactical, operational, and strategic critical assets from the edge to the core. In this Help Net Security video, Geoffrey Mattson, CEO of Xage Security, discusses the steps enterprises and critical infrastructure must … Continue reading Strengthening defenses against nation-state and for-profit cyber attacks→

How Google plans to make stolen session cookies worthless for attackers

Posted on by

Google is working on a new security feature for Chrome called Device Bound Session Credentials (DBSC), meant to prevent attackers from using stolen session cookies to gain access user accounts. Session (i.e., authentication) cookies are stored by brows… Continue reading How Google plans to make stolen session cookies worthless for attackers→