Access Control
Access Control | News, how-tos, features, reviews, and videos
How long-term hybrid work is changing security strategies
CISOs across industries are revisiting the stopgap security tools and the temporary policies they enacted to quickly enable remote work to replace them with stronger permanent solutions. But the old rules no longer apply.
12 cybersecurity startups to watch
Security startups are often innovation leaders that attempt to solve critical and persistent problems. These are some of the most interesting ones to watch as they tackle issues around multicloud security, identity management,...
Rainbow tables explained: How they work and why they're (mostly) obsolete
Rainbow tables are password cracking tools with origins dating back to research from the early 1980s. Here's how they work, why attacks are easy to prevent, and how they compare to modern password cracking.
How to test the impact of new Windows DCOM Server authentication
Microsoft has hardened authentication for its DCOM Server in response to a vulnerability. Check for the impact on your network now before the change becomes permanent.
4 tips to prevent easy attacker access to Windows networks
The Colonial Pipeline attackers likely got in using old, compromised VPN credentials. This advice will force attackers to work much harder.
Report: Active Directory Certificate Services a big security blindspot on enterprise networks
Microsoft's Active Directory PKI component commonly have configuration mistakes that allow attackers to gain account and domain-level privileges.
6 minimum security practices to implement before working on best practices
Every Windows network admin can improve their security posture by focusing on these six basic areas.
How to hack 2FA: 5 basic attack methods explained
As two-factor authentication becomes more widespread, criminals seek novel ways to subvert it. Here's what you need to know.
17 cyber insurance application questions you'll need to answer
Recent high-profile security incidents have tightened requirements to qualify for cyber insurance. These are the tougher questions insurance carriers are now asking.
Credential stuffing explained: How to prevent, detect, and defend against it
Credential stuffing is the automated use of collected usernames and passwords to gain fraudulent access to user accounts.
How to prepare for the demise of Windows NT LAN Manager
NTLM is a less secure protocol for authenticating Windows network access. Follow these steps to begin migration off it or to limit its use.
SSO explained: How single sign-on improves security and the user experience
Single sign-on (SSO) is a centralized session and user authentication service in which one set of login credentials can be used to access multiple applications.
8 top identity and access management tools
Identity is becoming the new perimeter, and these IAM tools have evolved to help secure assets as organizations rely less on traditional perimeter defenses and move to zero-trust environments.
5 things CISOs want to hear about zero trust at the RSA Conference
Security executives are interested in how ZT vendors will integrate with existing technologies, supplement ongoing projects, and support business processes.
To better defend digital assets, follow physical security's playbook
It’s high time that the owners and managers of corporate networks take the same approach and sense of urgency to protecting corporate digital assets that their physical security counterparts have taken with building security.
![CSO > Password elimination [conceptual password security lock in a trash bin]](https://images.idgesg.net/images/article/2019/06/cso_password_elimination_abstract_passwords_by_bluebay2014_gettyimages-924698706_trashed_security_lock_in_garbage_can_by_porcorex_gettyimages-916512456_2400x1600-100798132-small.3x2.jpg)
The password hall of shame (and 10 tips for better password security)
Banish these common passwords now and employ these tips for better password security.
Tips to improve domain password security in Active Directory
Follow this advice to better secure domain passwords in a Microsoft environment.
How to reset Kerberos account passwords in an Active Directory environment
A regular reset of the KRBTGT account password will help prevent golden ticket attacks that allow wide unauthorized access to your network.
-
White Paper
-
eBook
Sponsored
