Cloud MFA

Multi-factor authentication (also referred to as 2FA or 2 Factor Authentication) is one of the most important steps you can take to secure your identities. MFA is an added step…
The post Cloud MFA appeared first on JumpCloud.
The post Cloud MFA appea… Continue reading Cloud MFA

Authentication on PCs: Recommendations from Security Experts

Authentication is an important part of working on a computer, whether logging on, opening encrypted data or using web services like PayPal. Usernames and passwords still play an important role, even if many experts advise against using passwords as the… Continue reading Authentication on PCs: Recommendations from Security Experts

Authentication on PCs: Recommendations from Security Experts

Authentication is an important part of working on a computer, whether logging on, opening encrypted data or using web services like PayPal. Usernames and passwords still play an important role, even if many experts advise against using passwords as the… Continue reading Authentication on PCs: Recommendations from Security Experts

Google releases new email, browser security features to prevent common hacking issues

Google has rolled out new security features for users of Gmail and Drive, as well as its Chrome web browser. For Gmail and Drive users, Google is offering an opt-in feature called the Advanced Protection Program, aimed at those who are more prone to online threats because of the nature of their work. The company announced the program in a blog post on Tuesday. “We took this unusual step because there is an overlooked minority of our users that are at particularly high risk of targeted online attacks,” the post says. “For example, these might be campaign staffers preparing for an upcoming election, journalists who need to protect the confidentiality of their sources, or people in abusive relationships seeking safety.” That could be seen as a reference to John Podesta, the Hillary Clinton campaign adviser whose who fell for a phishing scam, giving Russian hackers access to his Gmail account […]

The post Google releases new email, browser security features to prevent common hacking issues appeared first on Cyberscoop.

Continue reading Google releases new email, browser security features to prevent common hacking issues

Inside Two-Factor Authentication Apps

Passwords are in a pretty broken state of implementation for authentication. People pick horrible passwords and use the same password all over the place, firms fail to store them correctly and then their databases get leaked, and if anyone’s looking over your shoulder as you type it in (literally or metaphorically), you’re hosed. We’re told that two-factor authentication (2FA) is here to the rescue.

Well maybe. 2FA that actually implements a second factor is fantastic, but Google Authenticator, Facebook Code Generator, and any of the other app-based “second factors” are really just a second password. And worse, that second password …read more

Continue reading Inside Two-Factor Authentication Apps

News in brief: Warning over Bitcoin scam app; Samsung facial recognition bypassed; Apple squares up to India

Your daily round-up of some of the other stories in the news Continue reading News in brief: Warning over Bitcoin scam app; Samsung facial recognition bypassed; Apple squares up to India

Salesforce, Dropbox, BeyondTrust, Pentesting, and Defcon – Paul’s Security Weekly #525

Mystery bug bounties, Marcus Hutchins pleads not guilty, a password guru regrets past advice, Dropbox and offline two-factor authentication, and more security news! Paul’s Stories Mystery Company Offers $250,000 Bounty for VM Escape Vulnerabilities Hacker Marcus Hutchins To Plead Not Guilty To Malware Development Password Guru Regrets Past Advice Salesforce Sacks Security Engineers For Their […]

The post Salesforce, Dropbox, BeyondTrust, Pentesting, and Defcon – Paul’s Security Weekly #525 appeared first on Security Weekly.

Continue reading Salesforce, Dropbox, BeyondTrust, Pentesting, and Defcon – Paul’s Security Weekly #525

Report: personal data of more than 14M Verizon customers is exposed in server breach

The personal data of as many as 14 million U.S. Verizon customers has been exposed in a publicly accessible server owned and operated by a third-party vendor. NICE Systems, an Israeli firm that provides call center and back-office operations for Verizon, administered the server that contained customer names, addresses, account details and account personal identification numbers (PINS), according to a new report from UpGuard’s Cyber Risk Team, who discovered the breach. Given NICE Systems’ history of supplying technology for state-sponsored — and often intrusive — surveillance, these findings are concerning, the report stated. “This offshore logging of Verizon customer information in a downloadable repository should be alarming to all customers who entrust their private data to major US companies, only to see it shared with unknown parties,” the report reads. The data was stored in an Amazon Web Services S3 bucket that “appears to have been created to log customer […]

The post Report: personal data of more than 14M Verizon customers is exposed in server breach appeared first on Cyberscoop.

Continue reading Report: personal data of more than 14M Verizon customers is exposed in server breach