Authentication
Authentication | News, how-tos, features, reviews, and videos
What is OAuth? How the open authorization framework works
OAuth is an open-standard authorization protocol or framework that describes how unrelated servers and services can safely allow authenticated access to their assets. It is widely accepted, but be aware of its vulnerabilities.
How to detect and halt credential theft via Windows WDigest
Attackers can steal user credentials by enabling credential caching in the Windows authentication protocol WDigest. Here's how to stop them.
2fa explained: How to enable it and how it works
Two-factor authentication (2fa) is a method of establishing access to an online account or computer system that requires the user to provide two different types of information. It can boost security for anyone using any kind of online...
!['NO' symbol [circle-backslash] and raised hand against a background of passwords / passcodes](https://images.idgesg.net/images/article/2019/09/cso_disable_authentication_stop_passwords_passcodes_by_gerd-altmann_cc0_via_pixabay_1200x800-100810051-small.3x2.jpg)
How to disable legacy authentication in Microsoft Exchange to enable MFA
Microsoft recommends enabling multi-factor authentication for Office 365. To do so, you must also disable basic or legacy authentication on Microsoft Exchange Server.
4 takeaways from Black Hat 2019
Experts identified new trends and warned of emerging or growing threats, including security's impact on software development and the growing threat social media poses.
What is access control? A key component of data security
Access control is a method of guaranteeing that users are who they say they are and that they have the appropriate access to company data. It is a vital aspect of data security, but it has some significant enforcement challenges.
Taxpayer First Act: Improving identity verification and modernizing the IRS
With citizens' PII at risk, some federal agencies like the IRS are moving away from knowledge-based verification. It's time for them all to follow suit.
How to check Privileged Identity management settings for Office 365
Microsoft Azure Privileged Identity Management (PIM) allows you to set administrative rights for roles on an as-needed basis, reducing risk.
How to set up Microsoft Azure AD Identity Protection to spot risky users
Whichever license of Azure Active Directory you own, you have options to set up alerts and automate actions to risky user behavior.
Companies with zero-trust network security move toward biometric authentication
According to new research, more companies are enabling biometric authentication on devices to verify access requests.
Is the digital identity layer missing or just misplaced?
The orchestration of existing services and data could provide a digital identity layer that gives the internet a common way to handle identity for all consumers.
How to disable basic authentication in Microsoft Office 365
If you've implemented multi-factor authentication, you should disable the default basic authentication to make sure attackers can't exploit it.
![CSO > Password elimination [conceptual password security lock in a trash bin]](https://images.idgesg.net/images/article/2019/06/cso_password_elimination_abstract_passwords_by_bluebay2014_gettyimages-924698706_trashed_security_lock_in_garbage_can_by_porcorex_gettyimages-916512456_2400x1600-100798132-small.3x2.jpg)
How First Citrus Bank got rid of employee passwords
The Florida bank rolled out passwordless authentication in February that relies on device biometrics of their smartphones.
Can the re-use of identity data be a silver bullet for industry?
The ability to re-use identity data for individuals across different systems would greatly simplify authentication. Here's what it would take to make it happen.
What should your company’s change password policy be?
Microsoft's recent dropping of its maximum password age default renews the debate over forced password changes. Here's why you should continue to expire passwords.
FINRA Rule 4512: U.S. SEC approves electronic signatures
The updated FINRA Rule 4512(a)(3) is now in effect, striking a blow against outdated regulations.
Why unauthenticated SMS is a security risk
Multifactor authentication that uses SMS messaging as a second factor is vulnerable to simple hacks. User education is the best defense.
Check your access control permissions before hackers do
Every organization has devices, networks or cloud services with improperly configured permissions that expose sensitive data or could allow hackers to gain privileged access. Check them now.
-
White Paper
-
Video/Webcast
Sponsored -
White Paper
-
eBook
Sponsored -
eBook
Sponsored
