Skip to main content

The WiKID Blog

Viewing posts tagged Authentication Attacks

FISMA report states two-factor authentication could have stopped 52% of incidents

Read the article in NextGov.

J.P. Morgan caused by lack of two-factor authentication on one server

This story is interesting because it shows that two-factor authentication would have (most likely) worked to prevent this devastating attack.  However, it also shows how hard it is for large organizations to actually implement security controls, especially given the use of third parties and  growing through acquisitions.

Update Bash if you are running OpenVPN

You can see the details about the attack. All of the OpenVPN tutorials we have done use "auth-user-pass-verify" on the client side to get the client to prompt for a username and password.  The exploit can be delivered as part of the username.  And it is before authentication.

Busting the Biometric Myth - once and for all

Everyone repeat after me: Biometrics are terrible authenticators.

Way too many people, even security and identity people see biometrics as "magic security dust" for two-factor authentication. It is way past time that we, the security community bust this myth. It is important because, unlike spending on firewalls which is insufficient but necessary, biometric infrastructure will need to be ripped out and thrown away. Any VC that is considering investing in a biometric company is wasting money that could be invested in a company that might make a difference.

SSH key management a potential risk

We've long said that while we love SSH, SSH key management is a weak point, especially if you need to meet compliance requirements such as PCI.  Now Charles Kolodgy of IDC is saying the same thing:

Recent Posts

Archive

2018
2017
2016
2015
2014
2013
2012
2011
2010
2009
2008

Categories

Tags

Authors

Feeds

RSS / Atom