Identity Management

Identity Management news, information, and how-to advice

windows phone biometrics
Wifi sign on gate

password protection

Top password managers compared

Unless you're living off the grid in a cabin in the woods, you have more passwords than you can manage -- the simple answer is to use a password management program

gas station

Thousands of U.S. gas stations exposed to Internet attacks

Over 5,000 tank gauges that are used to monitor fuel levels and potential spills are accessible from the Internet without a password

Login password

Will 2015 be the year we say goodbye to passwords?

While innovation continues in many aspects of security we still rely heavily on users to select secure passwords to authenticate themselves to our systems. Given the spate of breaches where weak passwords played a key role, will 2015...

21 jpmorganchase

Two-factor authentication oversight led to JPMorgan breach, investigators reportedly found

The attackers stole an employee's access credentials and used them to access a server that lacked a stronger authentication mechanism

the interview movie

Howard Stern is right: Journalists should do a gut check on Sony coverage

Some information behind the Sony breach is important and valuable. But is it ethical and necessary to publish the private details of emails, sales contracts and other privileged information that has been leaked in this breach?

orange fingerprint

Security group plans for a future without passwords

The FIDO Alliance encourages stronger use of biometrics and hardware tokens instead of passwords to identify users

gmail hijack

Forgotten subdomains boost risk of account hijacking, other attacks

Some sites have subdomains pointed at old domains that have long expired and can be registered by attackers

What you should consider when choosing a password manager

Password managers offer many convenient options, but some come at the expense of security

Dump your passwords! 8 security and identity breakthroughs

From electronic pills to digital tattoos, these eight innovations aim to secure systems and identities without us having to remember a password ever again

identity concept 164551610

New Brunswick conquers identity management with virtual directory

What started as a single provincial department's effort to roll out a virtual directory now helps government employees and citizens access about 150 applications. Find out how New Brunswick solved what could have otherwise been a big...

Salesforce warns customers of malware attack

A new version of the Dyreza online banking Trojan is stealing Salesforce.com log-in credentials

Hackers launch Apple ID phishing campaign playing on iCloud security worries

Phishing emails masquerade as security alerts from Apple about rogue iTunes purchases, researchers from Symantec said

LinkedIn beefs up account security with session management, detailed alerts

LinkedIn now allows users to see and terminate their authenticated sessions from multiple devices

27 million South Koreans affected by data breach

South Korean authorities have revealed details surrounding massive data breach that impacts 27 million people aged 15-65. Moreover, local media is reporting that 16 people involved with the scheme were arrested, and that the full...

wipeout
In Depth

Why your online identity can never really be erased

A ruling by a European Court may make it more difficult to find certain information that people claim is 'inadequate ... irrelevant ... or excessive,' but that doesn't mean it will disappear. Some critics, who call the ruling...

Is “Bring Your Own Identity” a security risk or advantage?

Questions abound over websites authenticating users via identities established through Facebook, LinkedIn, Google, Amazon, Microsoft Live, Yahoo Ponemon Institute survey shows.

Why the Microsoft Active Directory design flaw isn't serious

Experts are skeptical of the seriousness of a reported design flaw in Microsoft Active Directory, which is used by many enterprises to control employee access to the corporate network.

Why password managers are not as secure as you think

University researchers have raised concerns about the security of web-based password managers that free people from the burden of having to remember website credentials.

Load More