Lucene search
+L

2640 matches found

Schneier on Security
Schneier on Security
added 2018/11/05 4:24 p.m.107 views

Troy Hunt on Passwords

Troy Hunt has a good essay about why passwords are here to stay, despite all their security problems: This is why passwords aren't going anywhere in the foreseeable future and why insert thing here isn't going to kill them. No amount of focusing on how bad passwords are or how many accounts have...

0.1AI score
Exploits0
CVE
CVE
added 2018/10/30 9:0 p.m.52 views

CVE-2018-16465

Nextcloud Server is affected when used with versions prior to 14.0.0. The issue is a missing state that would have enforced a second factor at login if the 2FA provider failed to load, effectively allowing a 2FA bypass under certain conditions. This vulnerability is described in advisories NC-SA-...

5.3CVSS5.1AI score0.00811EPSS
Exploits0References2Affected Software1
Securelist
Securelist
added 2018/10/24 10:0 a.m.90 views

Phishing for knowledge

When we talk about phishing, top of mind are fake banking sites, payment systems, as well as mail and other globally popular services. However, cybercriminals have their fingers in far more pies than that. Unobviously, perhaps, students and university faculties are also in the line of fire. The...

1.1AI score
Exploits0
Malwarebytes
Malwarebytes
added 2018/10/17 4:52 p.m.42 views

Is FIDO the future instrument to prove our identity?

FIDO, short for Fast IDentity Online, is an industry consortium started in 2013 to address the lack of interoperability among strong authentication devices and the problems users face creating and remembering multiple usernames and passwords. Among the founders were those who work in the financia...

7.4AI score
Exploits0
Schneier on Security
Schneier on Security
added 2018/10/02 10:53 a.m.26 views

Facebook Is Using Your Two-Factor Authentication Phone Number to Target Advertising

From Kashmir Hill: Facebook is not content to use the contact information you willingly put into your Facebook profile for advertising. It is also using contact information you handed over for security purposes and contact information you didn't hand over at all, but that was collected from other...

0.3AI score
Exploits0
Malwarebytes
Malwarebytes
added 2018/09/14 3:0 p.m.89 views

Is two-factor authentication (2FA) as secure as it seems?

Two-factor authentication 2FA was invented to add an extra layer of security to the—now considered old-fashioned and insecure—simple login procedure of entering a username and password. One of the most well-known examples of 2FA is when you try to log into a familiar website from a different...

7.5AI score
Exploits0
Krebs on Security
Krebs on Security
added 2018/09/12 8:58 p.m.64 views

U.S. Mobile Giants Want to be Your Online Identity

The four major U.S. wireless carriers today detailed a new initiative that may soon let Web sites eschew passwords and instead authenticate visitors by leveraging data elements unique to each customer's phone and mobile subscriber account, such as location, customer reputation, and physical...

6.6AI score
Exploits0
Citrix
Citrix
added 2018/09/05 12:0 a.m.9 views

How to Secure SSH Access to the NetScaler Appliance with Public Key Authentication

This article contains information about securing administrative access to the NetScaler appliance by using the public key authentication mechanism of Secure Shell SSH. Requirements To complete the procedure in this document, the NetScaler appliance must have the following tools: An SSH client...

7.3AI score
Exploits0
The Hacker News
The Hacker News
added 2018/08/31 7:11 a.m.1 views

Google 'Titan Security Key' Is Now On Sale For $50

Google just made its Titan Security Key available on its store for $50. First announced last month at Google Cloud Next '18 convention, Titan Security Key is a tiny USB device—similar to Yubico's YubiKey—that offers hardware-based two-factor authentication 2FA for online accounts with the highest...

6.5AI score
Exploits0
The Hacker News
The Hacker News
added 2018/08/29 8:15 a.m.4 views

Instagram Adds 3 New Security Tools to Make its Platform More Secure

Instagram is growing quickly—and with the second most popular social media network in the world behind just Facebook, the photo-sharing network absolutely dominates when it comes to user interactions. And with great success comes great responsibility—responsibility to keep users' accounts safe,...

7.3AI score
Exploits0
The Hacker News
The Hacker News
added 2018/08/29 8:15 a.m.63 views

Instagram Adds 3 New Security Tools to Make its Platform More Secure

Instagram is growing quickly—and with the second most popular social media network in the world behind just Facebook, the photo-sharing network absolutely dominates when it comes to user interactions. And with great success comes great responsibility—responsibility to keep users' accounts safe,...

0.3AI score
Exploits0
OSV
OSV
added 2018/08/28 10:34 p.m.57 views

GHSA-X489-JJWM-52G7 Tinfoil Devise-two-factor does not "burn" a successfully validated one-time password (OTP)

Tinfoil Devise-two-factor before 2.0.0 does not strictly follow RFC 6238 § 5.2 and does not "burn" a successfully validated one-time password aka OTP, which allows physically proximate attackers with a target user's login credentials to log in as said user by obtaining the OTP through performing ...

5.3CVSS5AI score0.01782EPSS
Exploits0References11
Github Security Blog
Github Security Blog
added 2018/08/28 10:34 p.m.35 views

Tinfoil Devise-two-factor does not "burn" a successfully validated one-time password (OTP)

Tinfoil Devise-two-factor before 2.0.0 does not strictly follow RFC 6238 § 5.2 and does not "burn" a successfully validated one-time password aka OTP, which allows physically proximate attackers with a target user's login credentials to log in as said user by obtaining the OTP through performing ...

5.3CVSS5.4AI score0.01782EPSS
Exploits0References10Affected Software1
Schneier on Security
Schneier on Security
added 2018/08/22 10:51 a.m.43 views

Good Primer on Two-Factor Authentication Security

Stuart Schechter published a good primer on the security issues surrounding two-factor authentication. While it's often an important security measure, it's not a panacea. Stuart discusses the usability and security issues that you have to think about before deploying the system...

1.4AI score
Exploits0
ThreatPost
ThreatPost
added 2018/08/17 4:47 p.m.26 views

AT&T Faces $224M Legal Challenge Over SIM-Jacking Rings

Cryptocurrency investor and Dogecoin founder Michael Terpin has filed a $223.8 million lawsuit against AT&T, alleging the mobile phone giant turned a blind eye to SIM fraud. Terpin alleges that more than 3 million cryptocurrency tokens worth $24 million were lifted from his digital wallet at an...

0.9AI score
Exploits0References4
The Hacker News
The Hacker News
added 2018/08/15 7:0 p.m.111 views

Widespread Instagram Hack Locking Users Out of Their Accounts

Instagram has been hit by a widespread hacking campaign that appears to stem from Russia and have affected hundreds of users over the past week, leaving them locked out of their accounts. A growing number of Instagram users are taking to social media, including Twitter and Reddit, to report a...

1.4AI score
Exploits0
Krebs on Security
Krebs on Security
added 2018/08/13 12:28 a.m.74 views

FBI Warns of ‘Unlimited’ ATM Cashout Blitz

The Federal Bureau of Investigation FBI is warning banks that cybercriminals are preparing to carry out a highly choreographed, global fraud scheme known as an "ATM cash-out," in which crooks hack a bank or payment card processor and use cloned cards at cash machines around the world to...

7.2AI score
Exploits0
CNVD
CNVD
added 2018/08/13 12:0 a.m.4 views

Nextcloud Server Authorization Issues Vulnerability

Nextcloud is a client-server software suite for creating network hard disks. An authorization issue vulnerability exists in versions of Nextcloud Server prior to 12.0.3, which can be exploited by an attacker to obtain user credentials and bypass two-factor authentication...

8.8CVSS8.2AI score0.01234EPSS
Exploits0References1
Schneier on Security
Schneier on Security
added 2018/08/07 11:40 a.m.13 views

Measuring the Rationality of Security Decisions

Interesting research: "Dancing Pigs or Externalities? Measuring the Rationality of Security Decisions": Abstract: Accurately modeling human decision-making in security is critical to thinking about when, why, and how to recommend that users adopt certain secure behaviors. In this work, we conduct...

1.8AI score
Exploits0
The Hacker News
The Hacker News
added 2018/08/02 6:25 a.m.600 views

Reddit Hacked – Emails, Passwords, Private Messages Stolen

Another day, another significant data breach. This time the victim is Reddit... seems someone is really pissed off with Reddit's account ban policy or bias moderators. Reddit social media network today announced that it suffered a security breach in June that exposed some of its users' data,...

0.8AI score
Exploits0
Rows per page
Query Builder