Identity & Access Management: Page

ChatGPT users at risk for credential theft

As ChatGPT's user base continues to grow, Group-IB says threat actors have exploited stolen accounts to collect users' sensitive data and professional credentials.

By Alexis Zacharakos • June 27, 2023

Blockchain security: Everything you should know for safe use

Despite its reputation, blockchain is subject to many of the same vulnerabilities as other software. It helps to have a clear idea of its inherent strengths and weaknesses.

By Karen Kent • June 20, 2023

Blockchain terminology: A glossary for beginners

Blockchain terminology can be difficult to understand, especially for those new to the technology. This glossary can help beginners learn about the basics of blockchain.

By Andrew Froehlich • June 9, 2023

logon (or login)

In computing, a logon is a procedure that enables an entity to access a secure system such as an operating system, application, service, website or other resource.

By Robert Sheldon • June 9, 2023

How to secure blockchain: 10 best practices

Blockchain has huge potential in the enterprise, but remember all emerging technologies come with their own risks. Consider these 10 best practices for securing blockchain.

By Jessica Groopman • June 8, 2023

KeePass vulnerability enables master password theft

KeePass developer Dominik Reichl said the vulnerability should be fixed in KeePass version 2.54, which is expected to release in July along with other security updates.

By Alexander Culafi • May 17, 2023

decentralized identity

Decentralized identity is an approach to identify and authenticate users and entities without a centralized authority.

By Sean Kerner • May 16, 2023

Intel BootGuard private keys leaked following MSI hack

Intel said it was "actively investigating" reports that OEM BootGuard keys were stolen and leaked by ransomware actors following a breach at motherboard maker MSI

By Alexander Culafi • May 8, 2023

How to implement principle of least privilege in Azure AD

Restricting users' permissions in Microsoft Azure AD to only what they need to complete their job helps secure and reduce the cloud attack surface.

By Packt Publishing, Kyle Johnson • May 5, 2023

Google rolls out passkeys in service of passwordless future

Google referred to its new passkey option, which features facial recognition, fingerprint and PIN-based authentication, as 'the beginning of the end of the password.'

By Alexander Culafi • May 3, 2023

password manager

A password manager is a technology tool that helps internet users create, save, manage and use passwords across different online services.

By Sean Kerner • May 2, 2023

1Password execs outline shift to passwordless authentication

1Password CEO Jeff Shiner and Anna Pobletts, head of passwordless, discuss the power of passkeys, the adoption challenges ahead, and the threat of generative AI attacks.

By Arielle Waldman • May 1, 2023

CrowdStrike details new MFA bypass, credential theft attack

At RSA Conference 2023, CrowdStrike demonstrated an effective technique that a cybercrime group used in the wild to steal credentials and bypass MFA in Microsoft 365.

By Rob Wright • April 26, 2023

two-step verification

Two-step verification is a process that involves two authentication steps performed one after the other to verify that someone or something requesting access is who or what they say they are.

By Ivy Wigmore • April 14, 2023

private CA (private PKI)

A private CA is an enterprise-specific certificate authority that functions like a publicly trusted CA.

By Jason Soroko • April 13, 2023

How to create fine-grained password policy in AD

Fine-grained password policies are a simple and effective way of ensuring password settings meet business requirements.

By Damon Garn • April 12, 2023

How to enable Active Directory fine-grained password policies

Specifying multiple password policies customized to specific account types adds another layer to an organization's security posture. Using PSOs instead of Group Policy can help.

By Damon Garn • April 12, 2023

How to use a public key and private key in digital signatures

Ensuring authenticity of online communications is critical to conduct business. Learn how to use a public key and private key in digital signatures to manage electronic documents.

By Katie Donegan, Joel Dubin • April 12, 2023

Centralized vs. decentralized identity management explained

With decentralized identity, organizations can worry less about data security and privacy, while users get more control over their information. But it's not without challenges.

By Karen Kent, Kyle Johnson • April 11, 2023

How to use Azure AD Connect synchronization for hybrid IAM

Organizations face many challenges authenticating and authorizing users in hybrid infrastructures. One way to handle hybrid IAM is with Microsoft Azure AD Connect for synchronization.

By Packt Publishing, Kyle Johnson • April 11, 2023

Top RSA Conference 2023 trends and topics

Enterprise Strategy Group's Jack Poller outlines his picks for getting the most out of the 2023 RSA Conference, from keynotes to startups, AI, innovation and more.

By Jack Poller • April 6, 2023

deprovisioning

Deprovisioning is the part of the employee lifecycle in which access rights to software and network services are taken away.

By Alexander Gillis • April 5, 2023

CSR (Certificate Signing Request)

A Certificate Signing Request (CSR) is a specially formatted encrypted message sent from a Secure Sockets Layer (SSL) digital certificate applicant to a certificate authority (CA).

By Sharon Shea • March 30, 2023

authentication factor

An authentication factor is a category of credential that is intended to verify, sometimes in combination with other factors, that an entity involved in some kind of communication or requesting access to some system is who, or what, they are declared to be.

By Ivy Wigmore • March 30, 2023

Zoom launches Okta Authentication for E2EE to verify identity

Authenticated Zoom attendees will get a blue shield icon next to their participant name to give enterprises additional security during sensitive meetings.

By Arielle Waldman • March 27, 2023