Enzoic

Blog | Enzoic

Why Enzoic Delivers Enterprise-Grade Continuous Credential Monitoring Helpful for Individuals, Not Enough for Enterprises In recent years, free services like Have I Been Pwned (HIBP) have helped raise awareness around the dangers of password reuse and compromised credentials. They’ve done a great job making the public more mindful of data ... Read More

Password hashing is the process of converting a plain-text password into a fixed-length string of characters (called a hash) using a one-way cryptographic algorithm​.  ... Read More

Compromised passwords remain one of the most common—and preventable—ways attackers gain access to systems. Despite advancements in security tools, weak and reused credentials still leave organizations wide open to phishing, credential stuffing, and account takeovers. To tackle this head-on, password monitoring and threat intelligence firm Enzoic has partnered with GuidePoint ... Read More

Credential leaks are fueling cyberattacks. Learn how credential stuffing works—and how to stop account takeovers before they start ... Read More

MFA Fatigue Attacks on the Rise Yet another challenge is undermining the effectiveness of MFA: MFA fatigue attacks. In an MFA fatigue attack (sometimes also referred to as an “MFA bombing” or “push bombing” attack), a hacker who already possesses a valid username and password bombards the rightful user with ... Read More

Updates from Enzoic’s Threat Research Team In the last Enzoic research update, we briefly discussed the travails of the healthcare industry and their challenges in establishing a successful cybersecurity posture in the face of a salivating cadre of identity thieves and ransomware operators. In the intervening few weeks, more analyses ... Read More

How authentication works, the difference between 2FA and MFA, and the various types of secondary authentication factors ... Read More

63% of US cardholders have fallen victim to fraud. One critical area of risk is the exposure of full payment card numbers on the dark web ... Read More

2024 Enzoic AD Lite Password Auditor Report In an era where cyber threats continue to evolve, password security remains one of the most critical yet often overlooked components of an organization’s security posture. Enzoic’s 2024 AD Lite Password Auditor Report highlights the ongoing risks associated with compromised credentials in Active ... Read More

A deep dive into some real-live techniques and scripts used by threat actors to commit credit card fraud. See the actual steps involved ... Read More