account protection - Security Ticks

Balancing security and user experience to improve fraud prevention strategies

account protection, cybersecurity, Don't miss, Features, financial industry, fraud, Hot stuff, J.D. Power, News, opinion / SecurityTicks

Balancing security and user experience to improve fraud prevention strategies 2024-12-17 at 07:03 By Mirko Zorz In this Help Net Security interview, Jennifer White, Senior Director for Banking and Payments Intelligence at J.D. Power, discusses how financial institutions can improve customer satisfaction during fraud resolution, covering proactive fraud prevention, clear communication, and empathetic issue resolution. […]

React to this headline:

Balancing security and user experience to improve fraud prevention strategies Read More »

Microsoft enforces defenses preventing NTLM relay attacks

account protection, Active Directory, authentication, Don't miss, Hot stuff, Microsoft, Microsoft Exchange, News, Windows Server / SecurityTicks

Microsoft enforces defenses preventing NTLM relay attacks 2024-12-11 at 15:03 By Zeljka Zorz Since making Kerberos the default Windows authentication protocol in 2000, Microsoft has been working on eventually retiring NTLM, its less secure and obsolete counterpart. Until NTLM gets disabled by default, Microsoft is working on shoring up defenses against NTLM relay attacks. How

React to this headline:

Microsoft enforces defenses preventing NTLM relay attacks Read More »

All Google Cloud users will have to enable MFA by 2025

account protection, cloud security, Don't miss, Google Cloud, Hot stuff, MFA, News / SecurityTicks

All Google Cloud users will have to enable MFA by 2025 2024-11-06 at 17:07 By Zeljka Zorz Google has announced that, by the end of 2025, multi-factor authentication (MFA) – aka 2-step verification – will become mandatory for all Google Cloud accounts. “Given the sensitive nature of cloud deployments — and with phishing and stolen

React to this headline:

All Google Cloud users will have to enable MFA by 2025 Read More »

Mandatory MFA for Azure sign-ins is coming

account protection, Don't miss, Hot stuff, MFA, Microsoft Azure, News / SecurityTicks

Mandatory MFA for Azure sign-ins is coming 2024-08-19 at 12:31 By Zeljka Zorz Microsoft is making multi-factor authentication (MFA) – “one of the most effective security measures available” – mandatory for all Azure sign-ins. Preparing for mandatory MFA for Azure The plan is for the shift to happen in two phases: October 2024: MFA will

React to this headline:

Mandatory MFA for Azure sign-ins is coming Read More »

Hackers stole call, text records of “nearly all” of AT&T’s cellular customers

account protection, AT&T, attacks, cloud security, cybercrime, data breach, Don't miss, Hot stuff, News, Privacy, Snowflake / SecurityTicks

Hackers stole call, text records of “nearly all” of AT&T’s cellular customers 2024-07-12 at 15:31 By Zeljka Zorz Hackers leveraging stolen Snowflake account credentials have stolen records of calls and texts made by “nearly all” of AT&T’s cellular customers from May to October 2022, the company has confirmed. “The data does not contain the content

React to this headline:

Hackers stole call, text records of “nearly all” of AT&T’s cellular customers Read More »

Info of 2,3+ million individuals stolen in Advance Auto Parts data breach

account protection, cloud security, data breach, Don't miss, enterprise, Hot stuff, MFA, News, Snowflake / SecurityTicks

Info of 2,3+ million individuals stolen in Advance Auto Parts data breach 2024-07-12 at 14:46 By Zeljka Zorz Personal information of over 2,3 million individuals has been stolen by attackers as part of the massive data grab via compromised Snowflake accounts without MFA protection, Advance Auto Parts has confirmed by filing notices with the attorney

React to this headline:

Info of 2,3+ million individuals stolen in Advance Auto Parts data breach Read More »

Google removes enrollment barrier for prospective Advanced Protection Program users

account protection, authentication, Don't miss, Google, Hot stuff, News, passwordless / SecurityTicks

Google removes enrollment barrier for prospective Advanced Protection Program users 2024-07-10 at 14:01 By Zeljka Zorz Google has removed a potential obstacle for high-risk users who want to enroll in the company’s Advanced Protection Program (APP): they can now do it just by setting a passkey. Users already enrolled in APP have been provided the

React to this headline:

Google removes enrollment barrier for prospective Advanced Protection Program users Read More »

Microsoft, Google widen passkey support for its users

account protection, Bitwarden, consumer, Don't miss, enterprise, FIDO Alliance, Google, Hot stuff, Microsoft, News, passwordless, passwords / SecurityTicks

Microsoft, Google widen passkey support for its users 2024-05-03 at 14:46 By Zeljka Zorz Since 2013, the first Thursday in May is marked as World Password Day, a day dedicated to raising awareness about the need for using strong, unique passwords to secure out digital lives. Despite decades of often-repeated statements proclaiming the death of

React to this headline:

Microsoft, Google widen passkey support for its users Read More »

Okta warns customers about credential stuffing onslaught

account hijacking, account protection, attacks, credentials, Don't miss, Hot stuff, News, Okta / SecurityTicks

Okta warns customers about credential stuffing onslaught 2024-04-29 at 14:01 By Zeljka Zorz Credential stuffing attacks have exploded this April, Okta warns, and advises its customers to use available tools to block access requests originating from residential proxies before authentication takes place. Abuse of proxy networks “In credential stuffing attacks, adversaries attempt to sign-in to

React to this headline:

Okta warns customers about credential stuffing onslaught Read More »

Apple debuts new feature to frustrate iPhone thieves

account protection, apple, Don't miss, Hot stuff, iOS, iPhone, mobile security, News, theft / SecurityTicks

Apple debuts new feature to frustrate iPhone thieves 2024-01-23 at 16:31 By Zeljka Zorz Besides fixing an actively exploited zero-day vulnerability, the latest update for the iOS 17 branch offers a new feature to help you protect your accounts and sensitive information in case your iPhone gets stolen. Stolen Device Protection If enabled, the Stolen

React to this headline:

Apple debuts new feature to frustrate iPhone thieves Read More »

SEC’s X account hacked to post fake news of Bitcoin ETF approval

account hijacking, account protection, Don't miss, Fake News, MFA, News, scams, Twitter / SecurityTicks

SEC’s X account hacked to post fake news of Bitcoin ETF approval 2024-01-10 at 15:47 By Zeljka Zorz Someone has hijacked the X (formerly Twitter) account of the US Securities and Exchange Commission (SEC), and posted an announcement saying the agency has decided to allow the listing of Bitcoin ETFs (exchange-traded funds) on registered national

React to this headline:

SEC’s X account hacked to post fake news of Bitcoin ETF approval Read More »

Amazon: AWS root accounts must have MFA enabled

account protection, AWS, cloud security, Don't miss, Hot stuff, MFA, News, privileged accounts, security key / SecurityTicks

Amazon: AWS root accounts must have MFA enabled 04/10/2023 at 12:01 By Zeljka Zorz Amazon wants to make it more difficult for attackers to compromise Amazon Web Services (AWS) root accounts, by requiring those account holders to enable multi-factor authentication (MFA). MFA options for AWS accounts AWS provides on-demand cloud computing platforms and APIs to

React to this headline:

Amazon: AWS root accounts must have MFA enabled Read More »

Google extends passkeys to Google Workspace accounts

account protection, authentication, Don't miss, Google, Google Cloud, Google Workspace, Hot stuff, News, passwordless / SecurityTicks

Google extends passkeys to Google Workspace accounts 05/06/2023 at 17:56 By Helga Labus After making passkeys available for consumers in early May, Google is now rolling them out for Google Workspace and Google Cloud accounts. This feature will soon be available (in open beta) for more than 9 million organizations and aims to provide users

React to this headline:

Google extends passkeys to Google Workspace accounts Read More »