Sophisticated phishing

Most of us can think of a time when we received a phishing email. In fact, most phishing emails are easy to identify, and automatically go to spam. However, in this ongoing ...

30 Ransomware Prevention Tips

Dealing with the aftermath of ransomware attacks is like Russian roulette. Submitting the ransom might seem like it’s the sole option for recovering locked data. But paying the ransom doesn’t mean that ...
TrickBot Malware Warning Victims of Infection by Mistake

TrickBot Malware Warning Victims of Infection by Mistake

Security researchers observed some variants of the TrickBot malware family mistakenly warning victims that they had suffered an infection. Advanced Intel’s Vitali Kremez traced the mistake to “password-stealing grabber.dll.” This module is ...
One in Every 142 Passwords is ‘123456’, New Research Shows

One in Every 142 Passwords is ‘123456’, New Research Shows

“123456” is the most widely used password on breached accounts, according to a recent password re-use study c by computer engineering students at Cyprus University. Last month, student Ata Hakçıl analyzed more ...
Updated AnarchyGrabber Steals Passwords, Spreads to Discord Friends

Updated AnarchyGrabber Steals Passwords, Spreads to Discord Friends

Researchers found an updated version of AnarchyGrabber that steals victims’ plaintext passwords for and infects victims’ friends on Discord. Detected as AnarchyGrabber3, the new trojan variant modified the Discord client’s %AppData%Discord[version]modulesdiscord_desktop_coreindex.js file ...

Hackers don’t break in – they log in

We talked about this very often so far: Passwords are by far the weakest link when it comes to security today. 81% of successful attacks involve lost, breached or re-used passwords. There ...

Password Security Question Recommendations

It is risky to post security questions. Security questions exist on pretty much every website that requires a username and password. [...] The post Password Security Question Recommendations appeared first on SecurityOrb.com ...
FBI to Internet Users: Don’t Let Your Browser Remember Your Password

FBI to Internet Users: Don’t Let Your Browser Remember Your Password

The U.S. Federal Bureau of Investigation this week offers some radical tips for private Internet users and businesses alike. Chief among them: disable autofill and remembering passwords. It’s not entirely clear whether ...

The War of Passwords: Compliance vs NIST

The most recent National Institute of Standards and Technology (NIST) guidelines have been updated for passwords in section 800-63B. The document no longer recommends combinations of capital letters, lower case letters, numbers ...
multifactor authentication

Making the Move to Multifactor Authentication

Over the last few years, multifactor authentication (MFA) has come a long way. In the past, MFA required that you carry a hard token on you at all times, but now, it ...
Security Boulevard