X XFediYour place in the Fediverse
XFEDI

Remote profile

ActivityPub
Profile banner
Posts

The person reusing a password is not the weakest link. The policy demanding 120 unique ones, rotated every 90 days, is.

https://blog.knowbe4.com/100-passwords-one-brain-stop-asking-humans-to-behave-like-machines

blog.knowbe4.com[Cybersecurity Awareness Month] 100 Passwords, One Brain: Stop Asking Humans to Behave Like MachinesPassword policies demanding 100 high-entropy secrets create cognitive overload. Discover why switching to passkeys and password managers boosts security.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

One credential, four months of undetected access, 5.7 million students. ETS didn't notice until September. The file transfer site is now offline. Two years of free credit monitoring awaits.

https://www.securityweek.com/one-compromised-login-exposed-millions-of-california-students-records/

SecurityWeekOne Compromised Login Exposed Millions of California Students' RecordsA data breach at testing contractor ETS exposed millions of California student records after hackers accessed an SFTP server.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

KYC nice in theory... a forger now sells identity packs with a money-back guarantee and a selfie that passes the liveness check. Professional, if nothing else.

https://www.bleepingcomputer.com/news/security/inside-the-underground-market-for-know-your-client-services/

BleepingComputerInside the Underground Market for Know Your Client ServicesCybercriminals are selling forged identity documents, deepfake videos, and live verification services to help buyers bypass Know Your Client (KYC) checks. Flare examines how these underground services operate and the techniques used to create and maintain fraudulent verified accounts.
↩ Reply ♡ 0 · ↻ 0 ↗ Original