Access Security
Third-Party Access Risks Explained
Attackers are going after third-party contractors, using their legitimate access to the targets and exploiting security gaps to break in and make off with their ill-gotten goods. But what is it about the ...
Lapsus$’s Breaches — A Wake Up Call for Defense of Identity in Depth
Okta, Uber, Rockstar, Samsung, Microsoft, Ubisoft, and others have all found themselves in the headlines for having been breached by the Lapsus$ crew. Claiming to be a couple of teens, this group ...
Lessons Learned from Twitter Security Disclosures
In January, Twitter confused the security world by firing their head of security Peiter Zatko — or as he is more commonly known in security circles, Mudge. The severing of ties came ...
3 Tips for Mitigating the Uber Hack
Rideshare giant Uber found themselves in the headlines yet again last week when news leaked out that they had been hacked. This is not the first time for the company finding themselves ...
Securing Your Software Supply Chain from Access Privilege Risks
The hacking of SolarWinds continues to reverberate, serving as a wakeup call for organizations to take stronger steps to secure their software supply chains. Here's an analysis of some of the calls for ...
Authomize Discovers PassBleed Password Stealing and Impersonation Risks in Okta
Organizations depend on their Identity Providers for managing their identities and access to their apps and services, using them as their trusted management solution for everything from Single Sign-On and Multi-Factor Authentication ...
Okta Customers Exposed to Risk of Password Theft and Impersonation in PassBleed Attacks
Authomize’s Security Research Lab has uncovered a set of inherent risks in the popular Identity Provider Okta that leave users exposed to potential compromise and exploitation.. The post Okta Customers Exposed to ...
3 Access Security Lessons Learned from the Marriott Data Breach
For the third time in less than five years, international hotel corporation Marriott is back in the news with yet another data breach. Marriott was the victim of a social engineering attack ...
