Smashing Security #099: Passwords – A Smashing Security splinter (replay)
LastPass Enterprise makes password security effortless for your organization. LastPass Enterprise simplifies password management for …
Browsing: 2fa
Two-Factor Authentication for Extra Security in the Cloud
Using credentials in combination with a piece of information that only the user knows makes it harder for intruders to get access to an …
Hackers demand ransom from hijacked Instagram influencers
Hackers are taking over high-profile Instagram users’ accounts and holding them to ransom, it was revealed this week. At least four …
You gave your number to Facebook for security and it used it for ads
What happens to the mobile numbers Facebook users add to their accounts to enable SMS two-factor authentication (2FA)? If you assume the …
Facebook: turn off SMS 2FA if you don’t want your number used for ads
What happens to the mobile numbers Facebook users add to their accounts to enable SMS two-factor authentication (2FA)? If you assume the …
Microsoft is killing passwords one announcement at a time
Windows 10 and Office 365 users can now log in to Azure AD applications using only the Authenticator App. The change is so simple it makes …
AdGuard adblocker resets passwords after credential-stuffing attack
AdGuard has taken the decision to reset all user accounts after being on the receiving end of a credential-stuffing and brute-force …
Your business should be more afraid of phishing than malware
The headlines love to talk about sophisticated hacking gangs, exploiting zero-day vulnerabilities to break their way into businesses and …
State Department scores an F on 2FA security
Senators have discovered that the State Department is breaking the law by not using multi-factor authentication (MFA or 2FA) in its emails. …
A week in security (September 10 – 16)
Last week on Malwarebytes Labs, we assessed the security of a portable router, identified ways to waste a scammer’s time, named the many …
Is two-factor authentication (2FA) as secure as it seems?
Two-factor authentication (2FA) was invented to add an extra layer of security to the—now considered old-fashioned and insecure—simple …
Major US mobile carriers want to be your password
If password-only security is reaching its end of days, what will replace it? For years, many have assumed that some form of new …
Credit card gobbling code found piggybacking on ecommerce sites
Thanks to Mark Stockley, our resident JavaScript, PHP and jQuery expert, for his help with this article. Dutch security researcher Willem …
Concerns raised over Google Titan Security Key because it’s made in China
Questions have been raised about the security of Google LLC’s recently launched Titan Security Key due to it being manufactured in China. …
Concerns raised over Google Titan Security Key as it’s made in China
Questions have been raised about the security of Google LLC’s recently launched Titan Security Key due to it being manufactured in China. …
Experts voice concern after discovering Google’s Titan Security Key is made in China
While the US and UK governments continue to eye China with suspicion, blocking the use of some Chinese hardware because of national …
Experts Call for Transparency Around Google’s Chinese-Made Security Keys
On Thursday, Google started selling its own Titan Security Keys on the Google Store; hardware tokens that offer more robust two-factor …
Instagram fights misinformation and account hijackings with new tools
As we posted over on our Instagram Stories yesterday, Instagram has announced two new safety features to help users sift the wheat from the …
Listening Watch sounds out security idea with websites that listen
Listening Watch, a project based on earlier work by researchers Prakash Shrestha and Nitesh Saxena, uses the power of sound to log you into …
Instagram finally supports third-party 2FA apps for greater account security
Instagram has entered the 21st century, and finally added support for third-party 2FA apps like Google Authenticator, Duo Mobile, and Authy. …
Listening-Watch: Strong, low-effort, wearable 2FA scheme
Passwords are still the preferred online authentication method because they are easy to use, but they are increasingly not enough to keep …
Boogiedown! Fornite is bribing players into enabling 2FA — and that’s a good thing
Security is a serious business, but it’s not something most people take seriously enough — as the number of weak and reused passwords out …
The security changes you can expect in iOS 12
This fall – very likely in September – Apple will unveil the next major release of its mobile operating system, iOS 12. The beta …
Microsoft AD FS flaw allows attackers to bypass MFA safeguards
A vulnerability (CVE-2018-8340) in Microsoft Active Directory Federation Services (ADFS) allows a second authentication factor for one …
Theft of user accounts on cryptocurrency exchanges is soaring
Within a year, the number of data leaks from cryptocurrency exchanges soared by 369%, Group-IB researchers have found, and the US, Russia …
Reddit’s serious “security incident” – what you need to know
Reddit has suffered a “serious” data breach but seems unwilling or unable to put a figure on its size. There are two parts to this …
Reddit hacked – but don’t give up on 2FA just yet
As you’ve probably heard in the news, Reddit has been hacked. The immensely popular website says that it discovered a data breach in …
Microsoft Edge adds WebAuthn as passwords near the end
Microsoft’s Edge browser has finally joined Mozilla Firefox and Google’s Chrome in supporting a working version of the emerging …
2FA SNAFU led to Reddit security breach in which user data was stolen
Reddit has revealed details of a security breach that enabled a hacker to gain access to private messages, usernames and encrypted …
Reddit suffers data breach due to SMS-based 2FA
Popular social news aggregation and discussion website Reddit has suffered a breach. The attacker broke into some of its systems and got …