Identity & Access Management: Page

Google Authenticator synchronization raises MFA concerns

Infosec experts say a synchronization feature added to Google's Authenticator app could lead to unintended consequences for organizations' multifactor authentication codes.

By Arielle Waldman • Oct. 16, 2023

Best practices to conduct a user access review

User entitlement reviews ensure only authorized users have access to essential systems and data. Uncover the steps of a user access review and helpful best practices.

By Sharon Shea • Oct. 16, 2023

password entropy

Password entropy is a measurement of a password's strength based on how difficult it would be to crack the password through guessing or a brute-force attack.

By Robert Sheldon • Oct. 10, 2023

Okta debuts passkey support to combat account compromises

The identity and access management vendor introduced products and features that addressed new social engineering techniques that require additional security measures beyond MFA.

By Arielle Waldman • Oct. 4, 2023

Transitioning to single-vendor SASE will take time

New Enterprise Strategy Group research reveals enterprises are interested in single-vendor SASE -- but with multiple tools on hand, the transition will take planning and time.

By John Grady • Oct. 2, 2023

Protected Extensible Authentication Protocol (PEAP)

Protected Extensible Authentication Protocol (PEAP) is a security protocol commonly used to protect wireless networks.

By Robert Sheldon • Sept. 26, 2023

Strong identity security could’ve saved MGM, Caesars, Retool

Three cyber attacks that featured vishing led to compromised identities, data loss and the interruption of operations. Passwordless authentication could have prevented all three.

By Jack Poller • Sept. 21, 2023

Palm scanning tech explained: Everything you need to know

Just like fingerprints, your vein patterns are unique. Now, palm scanning technology is using your veins as a new form of identification that's more secure than other biometrics.

By Amanda Hetler • Sept. 21, 2023

bitcoin mining

Bitcoin mining is a type of cryptomining in which new bitcoin are entered into circulation and bitcoin transactions are verified and added to the blockchain.

By Alexander Gillis, Nick Barney • Sept. 19, 2023

Time for an identity security revolution

Identity needs to be the foundational component of the cybersecurity stack, because attackers are primarily after an organization's data.

By Jack Poller • Sept. 12, 2023

How Storm-0558 hackers stole an MSA key from Microsoft

Microsoft detailed a series of errors that led to a consumer account signing key accidentally being included in a crash dump that was later accessed by Storm-0558 actors.

By Arielle Waldman • Sept. 7, 2023

Identity needs a seat at the cybersecurity table

The shift to the cloud and remote work, combined with the rise of phishing and other identity-related attacks, puts identity security at the forefront of cybersecurity concerns.

By Jack Poller • Sept. 6, 2023

BYOI (bring your own identity)

BYOI (bring your own identity) is an approach to digital authentication in which an end user's username and password are managed by a third party. BYOI is increasingly being used for website authentication.

By Robert Sheldon , Sharon Shea • Aug. 23, 2023

CrowdStrike observes massive spike in identity-based attacks

Identity-based attacks like Kerberoasting saw massive increases over the last 12 months as adversary breakout time fell, according to CrowdStrike's 2023 Threat Hunting Report.

By Alexander Culafi • Aug. 8, 2023

orphan account

An orphan account, also referred to as an orphaned account, is a user account that can provide access to corporate systems, services and applications but does not have a valid owner.

By TechTarget Contributor • Aug. 7, 2023

How honey tokens support cyber deception strategies

Learn how to flip the script on malicious hackers with honey tokens, which act like tripwires to reveal an attacker's presence.

By Rob Shapland , Alissa Irei • July 31, 2023

Common Access Card (CAC)

A Common Access Card (CAC) is a smart card issued by the Unites States Department of Defense for accessing DOD systems and facilities.

By Rahul Awati • July 31, 2023

national identity card

A national identity card is a portable document, typically a plasticized card with digitally embedded information, that is used to verify aspects of a person's identity.

By Katie Terrell Hanna • July 28, 2023

Improve IAM with identity threat detection and response

Attackers increasingly target user accounts to gain access. Identity threat detection and response offers organizations a way to improve security for identity-based systems.

By Paul Kirvan • July 28, 2023

Microsoft still investigating stolen MSA key from email attacks

While Microsoft provided additional attack details and techniques used by Storm-0558, it remains unclear how the Microsoft account signing key was acquired.

By Arielle Waldman • July 17, 2023

mobile authentication

Mobile authentication is the verification of a user's identity via a mobile device using one or more authentication methods for secure access.

By TechTarget Contributor • July 7, 2023

single-factor authentication (SFA)

Single-factor authentication (SFA) is a process for securing access to a given system, such as a network or website, that identifies the party requesting access through only one category of credentials.

By TechTarget Contributor • July 6, 2023

knowledge-based authentication

Knowledge-based authentication (KBA) is an authentication method in which users are asked to answer at least one secret question.

By TechTarget Contributor • July 5, 2023

security token

A security token is a physical or wireless device that provides two-factor authentication (2FA) for users to prove their identity in a login process.

By Paul Kirvan • June 30, 2023

Partners make zero-trust assessment a core security service

Service providers have made zero-trust assessments a key part of their emerging zero-trust offerings. Those evaluations create a roadmap that guides the clients' security journey.

By John Moore • June 28, 2023