Security news aggregator

Latest coverage for Authentication

Stay secure online with the latest on authentication techniques, best practices, and industry updates at the forefront of information security.

5 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Authentication confirms the identity of users or systems before granting access to resources, typically using factors like passwords (knowledge), hardware tokens (possession), or biometrics (inherence). It establishes trust boundaries that prevent unauthorized entities from impersonating legitimate users or devices within networks and applications.

Weak authentication enables attackers to perform account takeover, privilege escalation, or lateral movement by exploiting stolen credentials, phishing, or replay attacks. Deploying multi-factor authentication (MFA) with independent factors significantly reduces these risks. Secure credential storage, regular rotation, and monitoring authentication logs for anomalies are critical defenses to detect and block unauthorized access attempts early in the attack chain.

Showing 5 most recent headlines Filtered view
Bank Info Security 1 year, 6 months ago

Microsoft, Ping, Okta Dominate Access Management Gartner MQ

Access Management Leaders Remain Unchanged as Customer Identity Cases ProliferateAdvances in customer identity around better user experience, strong authentication, and centralized identity processes have driven rapid growth in the access management market. The space by grew 17.6% to $5.85 billion in 2023 as organizations increasing look to replace homegrown CIAM solutions.

More from Bank Info Security 4 Jan 2025, 11:30 a.m. Aerospace Authentication Microsoft Okta

The changes to the healthcare privacy regulation with technical controls such as network segmentation, multi-factor authentication, and encryption. The changes would strengthen cybersecurity protections for electronic health information and address evolving threats against healthcare entities.

More from Dark Reading 3 Jan 2025, 10:30 a.m. Authentication Critical Infrastructure Encryption Healthcare MFA Privacy Proposal Regulation
Bank Info Security 1 year, 6 months ago

'DoubleClickjacking' Threatens Major Websites’ Security

Flaw Bypasses Clickjacking Defenses, Enables Account TakeoversHackers are exploiting the split-second delay between two mouse clicks to carry out sophisticated clickjacking attacks, tricking victims into authorizing transactions or granting access they never intended. "DoubleClickjacking" manipulates users into granting OAuth and API permissions

More from Bank Info Security 3 Jan 2025, 10:30 a.m. API Artificial Intelligence Authentication Flaw Victims