FBI: BEC now a $26 billion fraud, as HR payroll diversion attacks linked to same scammers
Business email compromise fraud shows no signs of slowing, according to new figures from the FBI.
two-factor authentication - News, Features, and Slideshows
News
-
-
Google Chrome password study: 25% users ignored a breached password alert
Google study shows why credential stuffing attacks work.
-
Microsoft closes security ‘loophole’ in AzureAD 2FA registration process
Admins can now block users from registering 2FA from an untrusted network.
-
iOS 12.3 kills support for Google’s Bluetooth Titan security key over hijacking flaw
Apple’s just released iOS 12.3 prevents iPhones from pairing with any Bluetooth Titan keys.
-
Microsoft launches review after a trio of Azure bugs locked users out of Office 365
Microsoft missed a major bug in Azure and its mitigations accidentally spread an outage from Europe and Asia to the US.
-
Microsoft goes password-free for Azure AD sign-in
No more passwords, Microsoft promises.
-
Your passwords are too short, police warn as Stay Smart Online Week prompts user education
Victoria Police has raised the bar on password security for Australian consumers to dizzying heights, marking Stay Safe Online Week with an exhortation for users to use passwords with at least 16 characters in them and to rely on 2-factor authentication for bank accounts, social media, and online payments.
David Braue | 12 Oct | Read more
-
The week in security: Aussie innovation success and cybersecurity’s university fallacy
Looking for new cybersecurity staff? They don’t’ necessarily need to have university degrees to be the best at what they do.
David Braue | 04 Sep | Read more
-
These two attacks can bypass Android’s work-personal divide
Researchers have demonstrated how, with a little social engineering, an attacker can grab corporate data on BYOD devices secured by Google's Android for Work container.
-
CyberSecurity Pitchfest uncovers local gems
As part of this year’s Spark Festival in Sydney, local success story Atlassian hosted the first CyberSecurity pitch fest
Anthony Caruana | 28 Oct | Read more
-
Ransomware hits Australian businesses using Windows remote tool
Security experts have warned Australian companies to lock down Windows remote desktop protocol (RDP) access after finding ransomware that uses brute-forced RDP credentials to install file-encrypting ransomware.
-
NIST: SMS two-factor is dead! If you're a US agency
Any service provider to the US government that relies on SMS for two-factor authentication may need to swap the method for something with fewer design weaknesses.
-
Android malware spies on six Australia bank apps for credentials
An old banking trojan that was once limited to Russia has been updated to catch Australian banking customers.
-
Selling passwords for $US150, and other dumb ways users threaten corporate security
Corporate passwords for sale, $US150 OBO. That, apparently, is how little some employees may take in exchange for compromising their company's security.
Tony Bradley, Melissa Riofrio | 30 Jan | Read more
-
The week in security: Apple security scrutinised; certifications to boost cloud appeal
Security pundits were poring over Apple's new Yosemite operating system, with some noting that the revised Spotlight service was sharing search terms by default; Apple responded by arguing that the Spotlight Suggestions feature was in fact not violating user privacy, even as other onlookers warned that Yosemite's version of TextEdit would upload unsaved TextEdit document to the company's iCloud service.
David Braue | 28 Oct | Read more
