If I can get your user name and password, I can easily break into and use your computer and network resources just as if I were you. Bruce Schneier wrote an article recently that discussed this issue. Many of the largest exploits are started with stolen credentials, the user name and password that we all use to access our computer, network, and online ...
Computer breaches can happen many ways, but the two most common are stolen credentials, and phishing emails. Credentials, your user name and password, sometimes are stolen from a web server breach, and then sold online on the criminal marketplaces. Or sometimes you are tricked into giving them up on clever fake websites. Phishing is one way that credentials are stolen. The links in phishing emails often will direct the unwary user to the fake web page with the helpful web ...
Continue Reading →
One of the very worst breaches that can happen to you is for an attacker to be able to access your email account. If someone else can access your email, and read the messages you send and receive, and access your contact list and calendar, then they can learn many personal details about you that would make it easier to steal your identity, access other web accounts using the password reset ...
From Pinterest. My apology in advance to all blondes.
We write all the time about improving your password strength by making it longer. This would actually be a pretty good password. Passfault was unable analyze the whole thing, but the first half through Louie gave it 9985 centuries to crack it with a total possibilities of 633 sextillion. (See below)
Ah, the good old days, when perimeter defenses and endpoint security software was all you needed to keep your network secure. Was it ever really that simple? Probably not, but many business owners and IT professionals are still hoping that keeping the firewall and antivirus updated is enough.
Over 90% of exploits start as an email in somebody’s inbox. According to NSS Labs, 97% of all breaches are enabled ...
Continue Reading →
If the title seems confusing, it is not your fault. It is really tough to get my head around the epic failure of purported security companies who bring products like these to market. This practically qualifies as fraud!
The first story is about a manufacturer of security camera and DVR systems. This company is a white box manufacturer, in that they build products that are privately labelled by ...
Continue Reading →And to wrap up password week at WyzGuys. From Pinterest
This would work out like this:
Aside from the gang sign, the hieroglyph, and the virgin’s blood, this would actually be an awesome and usable password.
Continue Reading →Keith Graham of SecureAuth was recently interviewed for a recent article on TechRepublic, and the subject of adaptive authentication came up. He defined adaptive authentication this way:
Continue Reading →“Adaptive authentication involves evaluating risk around the login process before the user even authenticates so that the system only steps up, or outright denies, the authentication when it deems a logon as a risk. Hence, ...
Here are the 25 most commonly used passwords for 2014. If your password is on this list, please understand that these passwords are among the first tried when automated password cracking software is used by a cyber-criminal. So if yours is here, change it now.
Passwords are becoming problematic for several reasons. The first, IMHO, is the use of email addresses as the user ...
Continue Reading →
Here’s a provocative statement: If you could just prevent your staff for clicking on links or opening attachments in phishing emails, 95% of your cybersecurity problems would be prevented.
As perimeter defenses and anti-malware software products have become more effective, cyber-attackers have turned to the phishing email approach as their number one favorite method for acquiring user names and passwords or gaining unauthorized access to computers on your network. The ...
Continue Reading →