Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Password Management

Passwordless Authentication vs MFA: What's the Difference?

The main difference between passwordless authentication and Multi-Factor Authentication (MFA) is that passwordless authentication completely removes the use of passwords, whereas MFA is used in conjunction with passwords. There are also differences in a user’s login experience when using passwordless authentication versus MFA, deploying each of them and their cost. Continue reading to learn more about the differences between passwordless authentication and MFA.

What To Look for in a PAM Solution

Organizations need a Privileged Access Management (PAM) solution to protect their privileged accounts from misuse and compromise. However, not all PAM solutions are created the same. Traditional on-premises PAM platforms can lack the features needed to provide a dynamic and secure solution. The key features to look for in a modern PAM solution include zero-trust security, cloud-based infrastructure, integration with native tools and easy deployment.

What Is a Passkey Manager?

A passkey manager is a tool that aids users in generating, storing and managing the passkeys they use to log in to their accounts. There are many types of passkey managers available on the market, including ones that come built into your devices, browser-based passkey managers and dedicated passkey managers that allow you to access your passkeys from anywhere. Continue reading to learn more about what passkey managers are and why you should use them to store your passkeys.

How hacker and security consultant Jayson E. Street breaks into businesses

“A man walks into a bank…” That may sound like the start of a joke but as hacker and security consultant Jayson E. Street tells it, it’s really nothing to laugh at. He’s walked into banks, hotels, government facilities, and biochemical companies all over the world and successfully compromised them.

Authenticator App vs SMS Authentication: Which Is Safer?

Multi-Factor Authentication (MFA) has become a cybersecurity necessity for protecting online accounts. It ensures that only authorized users can access an account. However, when picking an MFA method, some options are more secure than others. An authenticator app is safer than SMS authentication because it generates 2FA codes locally, which prevents cybercriminals from intercepting the codes as they can with SMS.

Can Passkeys Be Shared?

Yes, passkeys can be shared when you store them in a password manager that supports them. Since passkeys are tied to the devices they’re created on, sharing them with someone who uses a different Operating System (OS) isn’t an option. However, with a dedicated password manager, users can share their passkeys with anyone, no matter what devices they use.

Random but Memorable - Episode 12.1: Data Breach Box Set with Jayson E Street

We're back! Join the podcast crew for a brand new season of random security. We're kicking off our first episode with notorious hacker and expert security consultant, Jayson E. Street. Settle in, as he recalls how understanding human behavior led him to successfully robbing banks and organizations on five different continents.

Types of Privileged Accounts

Organizations separate access to specific data and administrative capabilities into different types of privileged accounts in order to securely run their operations. Some types of privileged accounts include domain administrator (admin) accounts, local admin accounts, privileged user accounts and emergency accounts. If not properly managed or secured, cybercriminals can gain unauthorized access to these privileged accounts and steal an organization’s sensitive data.

How To Identify a Fake Text Message

A few ways you can identify if a text message is fake is if its context is irrelevant to you; it’s claiming to be someone you know from an unknown number; it displays a sense of urgency; it’s asking you to click on a link; and it contains spelling, grammatical errors or both. In recent years, there has been an abundance of fake text messages targeting individuals to steal their personal information – placing victims at risk of having their identity stolen and losing money.