Watchdog: Despite progress, IRS needs to improve electronic fraud detection

A Treasury Department watchdog says the Internal Revenue Service has made progress in improving its identity management controls for people filing their taxes online, but still has some work to do when it comes to identifying fraudulent profiles and activity. The Treasury Inspector General for Tax Administration (TIGTA), which audits the IRS, released a report Thursday appraising the agency’s implementation and improvement of authentication controls. TIGTA credited the IRS for requiring taxpayers to use two-factor authentication to log on to use the IRS’s online services. The auditor also said the IRS improved its ability to automatically to monitor activity across different systems and detect any anomalies. “Using this tool, the Cyber Fraud Analytics group identified fraudulent activity in which fraudsters improperly used data stolen from sources outside of the IRS to successfully perpetrate a small number of targeted attacks,” TIGTA said. However, the auditor added that those monitoring tools need […]

The post Watchdog: Despite progress, IRS needs to improve electronic fraud detection appeared first on Cyberscoop.

Continue reading Watchdog: Despite progress, IRS needs to improve electronic fraud detection

Uber dismissive about security flaw that lets hackers bypass its 2FA

By Waqas
Uber has no plans to fix a critical security flaw
This is a post from HackRead.com Read the original post: Uber dismissive about security flaw that lets hackers bypass its 2FA
Continue reading Uber dismissive about security flaw that lets hackers bypass its 2FA

Cybersecurity New Year’s resolutions, you say? Why not.

It’s no surprise that our resolutions are usually about health, finances, relationships, and self-improvement. As all of us live digital lives, too, why not think up cybersecurity New Year’s resolution that concern our online health and safe… Continue reading Cybersecurity New Year’s resolutions, you say? Why not.

Less than 10 percent of Google users turn on two-factor authentication

Less than 10 percent of active Google account holders utilize two-factor authentication, according to a software engineer who works for the California-based tech giant. At the Enigma security conference in Santa Clara, California on Wednesday, Grzegorz Milka described Google’s efforts to make two-factor authentication an extremely effective security tool in the face of account breaches. Like other tech companies, however, Google hasn’t made two-factor authentication a default feature because of a lack of convenience they fear would drive users away, Milka said. In 2016, Google collected over 4,000 data breach dumps totalling 3.3 billion stolen credentials. The data dumps included 67 million valid Google passwords, a number Milka used to emphasize that password security requires “defense-in-depth” that can work even when passwords are stolen — which happens about 250,000 times per week. Late last year, Google upgraded their two-factor authentication tools for at-risk users. The upgrade, known as the Advanced Protection Program, mandates two-factor authentication and provides free hardware keys […]

The post Less than 10 percent of Google users turn on two-factor authentication appeared first on Cyberscoop.

Continue reading Less than 10 percent of Google users turn on two-factor authentication

How to set up 2FA on your Facebook account

As Facebook continues to embed itself into the fabric of our social and online lives – or, perhaps it’s more correct to say, as we let Facebook continue to embed itself in our lives – it’s increasingly important that we keep our accounts safe from unau… Continue reading How to set up 2FA on your Facebook account

Twitter upgrades two-factor authentication options by allowing third party apps

After a decade of prodding, Twitter drastically improved its two-factor authentication on Wednesday, expanding an important security tool widely adopted elsewhere online, including Google and Facebook. The social media company announced support for apps like Google Authenticator and Authy that work offline, independent of carrier or location and are more resistant to eavesdropping or hijacking. Crucially, users can now turn off SMS authentication for the first time. It’s considered one of the least-secure methods of two-factor authentication. Two-factor authentication typically works by requiring a password as well as a second method to log in. Commonly used second factors include SMS codes, small pieces of  hardware — such as USB keys or dongles — or even biometric authenticators like fingerprints or face scans. Security experts strongly recommend all users turn on two-factor authentication for important internet accounts including email, banking and social media. Twitter users can upgrade in the settings and privacy section of their profiles. We’re rolling out an update to […]

The post Twitter upgrades two-factor authentication options by allowing third party apps appeared first on Cyberscoop.

Continue reading Twitter upgrades two-factor authentication options by allowing third party apps

Can Bitcoin Be Hacked?

Cryptocurrency—Bitcoin in particular—has seen a huge surge in popularity recently. This is partly due to a dramatic increase in the value of Bitcoin, which is currently trading at its highest ever rate of $8099.99 per coin. However, with al… Continue reading Can Bitcoin Be Hacked?

Most Americans have never heard of multi-factor authentication

Most Americans have never heard of two-factor authentication, even as the world’s biggest tech companies are pushing increasingly strong versions of multi-factor authentication in hopes of solving a vast array of cybersecurity problems. According to a new survey from Duo Security, only 28 percent of Americans use two-factor authentication and over 56 percent never heard of the technology before the survey. Just over half (54 percent) of Americans using two-factor authentication began doing so voluntarily. About 45 percent of respondents began because they were forced or incentivized to do so. There may be some good news hidden in these numbers. Of the people who have turned on two-factor authentication, only about 1 percent ended up turning it off. Every one of them cited inconvenience as the reason. Two-factor authentication is a way for people to prove their identity in two ways using something they know (like a password) and something they have (like their phone or a security key). […]

The post Most Americans have never heard of multi-factor authentication appeared first on Cyberscoop.

Continue reading Most Americans have never heard of multi-factor authentication

Cloud MFA

Multi-factor authentication (also referred to as 2FA or 2 Factor Authentication) is one of the most important steps you can take to secure your identities. MFA is an added step…
The post Cloud MFA appeared first on JumpCloud.
The post Cloud MFA appea… Continue reading Cloud MFA