Info Security Magazine
4 years, 3 months ago
US Indicts Russian Over "Carding Shop"
Russian allegedly operated darknet store, selling stolen PII, credentials and authentication tools
Security news aggregator
Latest coverage for Authentication
Stay secure online with the latest on authentication techniques, best practices, and industry updates at the forefront of information security.
8
headlines in this view
Refine the feed
Search across headline titles and summaries.
Tag briefing
Background for this topic.
Authentication confirms the identity of users or systems before granting access to resources, typically using factors like passwords (knowledge), hardware tokens (possession), or biometrics (inherence). It establishes trust boundaries that prevent unauthorized entities from impersonating legitimate users or devices within networks and applications.
Weak authentication enables attackers to perform account takeover, privilege escalation, or lateral movement by exploiting stolen credentials, phishing, or replay attacks. Deploying multi-factor authentication (MFA) with independent factors significantly reduces these risks. Secure credential storage, regular rotation, and monitoring authentication logs for anomalies are critical defenses to detect and block unauthorized access attempts early in the attack chain.
Showing 8 most recent headlines
Filtered view
The Hacker News
4 years, 3 months ago
Researchers Trace LAPSUS$ Cyber Attacks to 16-Year-Old Hacker from England
Authentication services provider Okta on Wednesday named Sitel as the third-party linked to a security incident experienced by the company in late January that allowed the LAPSUS$ extortion gang to remotely take over an internal account belonging to a customer support engineer
Threat Post
4 years, 3 months ago
Microsoft: Lapsus$ Used Employee Account to Steal Source Code
The data-extortion gang got at Microsoft's Azure DevOps server. Meanwhile, fellow Lapsus$ victim and authentication firm Okta said 2.5 percent of customers were affected in its own Lapsus$ attack.
The Hacker News
4 years, 3 months ago
Microsoft and Okta Confirm Breach by LAPSUS$ Extortion Group
Microsoft on Tuesday confirmed that the LAPSUS$ extortion-focused hacking crew had gained "limited access" to its systems, as authentication services provider Okta revealed that nearly 2.5% of its customers have been potentially impacted in the wake of the breach
The Hacker News
4 years, 3 months ago
Lapsus$ Hackers Claim to Have Breached Microsoft and Authentication Firm Okta
Microsoft and authentication services provider Okta said they are investigating claims of a potential breach alleged by the LAPSUS$ extortionist gang
Dark Reading
4 years, 3 months ago
The Secret to Zero Trust You Need to Know
If every application, device, and bot need access and authentication at some point, the need for managing and controlling the confidential data that allows those functions gets staggeringly large.
The Register
4 years, 3 months ago
Authentication oufit Okta investigating Lapsus$ breach report
Cloudflare takes no chances, hits the identity reset button The Lapsus$ extortion crew has turned its attention to identity platform Okta and published screenshots purportedly showing the group gaining access to the company's internals.…
Bleeping Computer
4 years, 3 months ago
Okta investigating claims of customer data breach from Lapsus$ group
Okta, a leading provider of authentication services and Identity and access management (IAM) solutions says it is investigating claims of data breach. [...]