password spraying Archives

Microsoft CEO Satya Nadella, with superimposed text: “Russia hacked me”

Russia Hacked Microsoft Execs — SolarWinds Hackers at it Again

AKA APT29: Midnight Blizzard / Cozy Bear makes it look easy (and makes Microsoft look insecure) ...

Security Boulevard

The Risks Azure AD Password Protection Ignores: Compromised and Blacklisted

Enzoic | September 28, 2022 | Active Directory, Active Directory passwords, all posts, azure, credential stuffing, Cybersecurity, Data breaches, Password Blacklists, Password Security, password spraying

2022 is shaping up to be an extremely successful year for cybercriminals. Data breaches are accumulating in unprecedented numbers, putting more and more information in the hands of bad actors. Cyberattacks this ...

Enzoic

How to Solve the Password Problem

Enzoic | September 22, 2022 | Active Directory, all posts, brute-force attack, Cybersecurity, dbir, NIST Password Guidelines, Password Policy, Password Security, password spraying, Password Tips

An Overhaul in Password Security Passwords aren’t going anywhere. Despite the buzz that biometrics and MFA are holistic solutions, passwords are a ubiquitous, crucial layer for authentication—and they’re low-cost and simple, too. That’s ...

Enzoic

The Exploitation of Privileged Accounts

Enzoic | August 31, 2022 | all posts, brute-force attack, Cybersecurity, default passwords, Password Security, password spraying, Privileged Accounts, Ransomware

The flow of news about data breaches and ransomware attacks is relentless. Businesses of all sizes—large companies included—continue to suffer. Not only do cyber attacks lead to financial damage, but they have ...

Enzoic

AD active directory Control Defend Extend Container Security

3 Keys to Defending Active Directory

Carolyn Crandall | April 21, 2021 | Active Directory, anomaly detection, identity and access management, password spraying

While perimeter defenses like firewalls and antivirus software remain essential elements of comprehensive network defense, stopping 100% of attacks at the perimeter is an impossibility with today’s ever-evolving attack surface. Eventually, an ...

Security Boulevard

Developing Active Defense from Password Spraying & Credential Stuffing

Enzoic | March 10, 2021 | all posts, credential stuffing, password spraying, Password Tips

Microsoft Active Directory (AD) is ubiquitous across the corporate landscape; you probably use it to authorize access at almost every level. Due to its popularity and importance, AD is a perfect target ...

Enzoic

Password Spraying: How Common Passwords Threaten Your Organization

Enzoic | February 23, 2021 | all posts, brute-force attack, Common Passwords, Cybersecurity, Data breaches, password spraying, Password Tips, SMB Cybersecurity

When hackers target your organization with a password spraying attack, hackers are betting that one (or more) of your employees is logging in with a commonly used password. Threat actors adopt this ...

Enzoic

Can You Crack the Hack?

Daniel Smith | April 11, 2019 | Attack Types & Vectors, bot management, Bots, credential cracking, credential stuffing, Hackers, Hacking, Password Security, password spraying

Let’s play a game. Below are clues describing a specific type of cyberattack; can you guess what it is? This cyberattack is an automated bot-based attack It uses automation tools such as ...

Radware Blog

Bots 101: This is Why We Can’t Have Nice Things

Daniel Smith | March 19, 2019 | ad fraud, Application Security, Attack Types & Vectors, Bots, credential stuffing, Cyber Security, Cybersecurity, password spraying, Scraping, security

In our industry, the term bot applies to software applications designed to perform an automated task at a high rate of speed. Typically, I use bots at Radware to aggregate data for ...

Radware Blog

Ad Network Sizmek Probes Account Breach

BrianKrebs | March 13, 2019 | brute-force light, Citrix breach, Data breaches, George Pappachen, password spraying, Resecurity, Sizmek Inc.

Online advertising firm Sizmek Inc. [NASDAQ: SZMK] says it is investigating a security incident in which a hacker was reselling access to a user account with the ability to modify ads and ...

Krebs on Security