Credential Monitoring
Google Just Fixed Session Cookie Theft in Chrome. Here Is What It Still Cannot Stop.
Google’s Device Bound Session Credentials are a meaningful step forward against infostealer malware. They also have significant limits that security teams need to understand before assuming the problem is solved. On April ...
‘Extremely serious’ — Mercedes-Benz Leaks Data on GitHub
Oh, Lord: My friends all hack Porsches—I must make amends ...
Massive ‘New’ Leaked Credentials List: Naz.API Pwns Troy
Have I been pwned? Yes, you probably have. Stop reusing passwords, already. Here’s what else you should do ...
NIST Password Guidelines 2021: Challenging Traditional Password Management
In 2017, the National Institute of Standards and Technology (NIST) released NIST Special Publication 800-63B Digital Identity Guidelines to help organizations properly comprehend and address risk as it relates to password management ...
The End of The Password Is Not Near
Let’s face it — everyone pretty much hates passwords. While many industry titans are making significant and noteworthy moves to eliminate passwords and offer a passwordless future, it still seems as if ...
Why Common IAM Solutions for Identity-based Attacks Aren’t Really Working?
by Stan Bounev and Chris Olive When faced with the problem of data being open to all users on an early, 1960’s mainframe computer, Fernando “Corby” Corbato rather nonchalantly assigned passwords to ...
Assessing the risk of compromised credentials
Assessing The Risk of Compromised Credentials to The Enterprise Businesses today face an abundance of organizational risk. These come in the form of creating the business model itself, dealing with third parties, ...

