Identity & Access Management: Page

three-factor authentication (3FA)

Three-factor authentication (3FA) is the use of identity-confirming credentials from three separate categories of authentication factors -- typically, the knowledge, possession and inherence categories.

By Alexander Gillis • March 24, 2023

FIDO (Fast Identity Online)

FIDO (Fast Identity Online) is a set of technology-agnostic security specifications for strong authentication.

By David Strom • March 20, 2023

YubiKey

YubiKey is a security token that enables users to add a second authentication factor to online services from tier 1 vendor partners, including Google, Amazon, Microsoft and Salesforce.

By Alexander Gillis • March 15, 2023

Flipper Zero explained: What to know about the viral hacker tool

The hacking tool blew up on TikTok. Unlike other TikTok trends, it is a powerful tool that can be used by serious pen testers and a learning device for new hackers.

By Ben Lutkevich • March 2, 2023

Accurately assessing the success of zero-trust initiatives

Zero-trust preparation can be difficult. Measuring how well the model provides security and business benefits after implementation is even more difficult.

By John Grady • March 2, 2023

sudo (su ‘do’)

Sudo is a command-line utility for Unix and Unix-based operating systems such as Linux and macOS.

By Robert Sheldon • Feb. 24, 2023

Web3 blockchain enables users to take control of identity

A centralized identity model creates security and privacy risks. Decentralized identity through Web3 could mitigate these risks, but companies must adapt to keep pace.

By Avivah Litan • Feb. 23, 2023

8 best password managers of 2023

A dedicated tool can help simplify password management and improve online security for individuals and enterprises alike.

By Ben Lutkevich • Feb. 21, 2023

4 identity predictions for 2023

Identity's place in the attack chain is driving the shift of identity responsibility from IT operations to security to look into passwordless, digital IDs, platforms and more.

By Jack Poller • Feb. 3, 2023

credential theft

Credential theft is a type of cybercrime that involves stealing a victim's proof of identity.

By Corinne Bernstein • Dec. 29, 2022

self-sovereign identity

Self-sovereign identity (SSI) is a model for managing digital identities in which individuals or businesses have sole ownership over the ability to control their accounts and personal data.

By Alexander Gillis • Dec. 29, 2022

continuous authentication

Continuous authentication is a method of verification aimed at providing identity confirmation and cybersecurity protection on an ongoing basis.

By Corinne Bernstein • Dec. 29, 2022

privilege creep

Privilege creep is the gradual accumulation of access rights beyond what individuals need to do their job.

By Crystal Bedell • Dec. 28, 2022

Google drops TrustCor certificates as questions loom

Google joined Mozilla and Microsoft in removing support for TrustCor Systems certificates following a Washington Post report on TrustCor's connections to spyware vendors.

By Rob Wright • Dec. 15, 2022

What are the differences between su and sudo commands?

Linux administrators have choices when deciding how to delegate privileges. Learn about the options they can take while ensuring their operations remain secure.

By Damon Garn • Dec. 13, 2022

How to implement least privilege access in the cloud

More organizations are moving their resources to the cloud but are not paying attention to how cloud access privileges are allocated. Learn how to limit access in the cloud.

By Dave Shackleford • Dec. 6, 2022

Mozilla, Microsoft drop Trustcor as root certificate authority

Mozilla and Microsoft removed support for TrustCor certificates after a Washington Post report revealed the company's ties to government contractors specializing in spyware.

By Rob Wright • Dec. 1, 2022

Twitter users experience apparent SMS 2FA disruption

The 2FA notification disruption occurred after CEO Elon Musk announced plans to shutter a majority of Twitter's microservices, though reasons for the outage are unconfirmed.

By Alexander Culafi • Nov. 15, 2022

TrustCor under fire over certificate authority concerns

TrustCor Systems, a certificate authority registered in Panama, is in hot water after a Washington Post report raised questions about its apparent connections to a spyware vendor.

By Shaun Nichols • Nov. 10, 2022

5 ways to overcome multifactor authentication vulnerabilities

Improve the resiliency of multifactor authentication by giving users more information, making default settings more secure, hiding secrets and more.

By Kyle Johnson • Nov. 8, 2022

Why it’s time to expire mandatory password expiration policies

Password expiration policies that force users to regularly reset passwords are counterproductive. It's time to align those policies with proven approaches to password security.

By Peter Loshin • Oct. 26, 2022

6 ways to prevent privilege escalation attacks

Privileges dictate the access a user or device gets on a network. Hackers who access these privileges can create tremendous damage. But there are ways to keep your networks safe.

By Michael Cobb • Oct. 24, 2022

What is the zero-trust security model?

The zero-trust security model is a cybersecurity approach that denies access to an enterprise's digital resources by default and grants authenticated users and devices tailored, siloed access to only the applications, data, services and systems they need to do their jobs.

By Alissa Irei , Sharon Shea • Oct. 20, 2022

default password

A default password is a standard preconfigured password for a device or software.

By Katie Terrell Hanna • Oct. 17, 2022

The history and evolution of zero-trust security

Before zero-trust security, enterprise insiders were trusted and outsiders weren't. Learn about the history of zero trust and the public and private sector efforts to adopt it.

By Mary Pratt • Oct. 12, 2022