two-factor authentication – Page 2 – PossibleThreat Articles

Food writer Jack Monroe loses at least £5,000 in SIM-swap fraud

October 16, 2019 0 Comments 2fa, Celebrities, data loss, Hacked, hijacking, jack monroe, Law & order, MFA, Mobile, multi-factor authentication, phishing, security threats, sim swap, SIM swapping, Social engineering, two-factor authentication

Credit to Author: Lisa Vaas| Date: Wed, 16 Oct 2019 10:53:52 +0000

Her accounts were drained in spite of using 2FA, showing that SIM swaps can still circumvent what’s a good security tool.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/QJiDHTqtHDo” height=”1″ width=”1″ alt=””/>

Security Sophos

Most Americans don’t have a clue what https:// means

October 11, 2019 0 Comments 2-factor Authentication, 2fa, cybersecurity survey, https, MFA, multi-factor authentication, pew research center, security threats, two-factor authentication

Credit to Author: Lisa Vaas| Date: Fri, 11 Oct 2019 11:21:40 +0000

…and wouldn’t know 2FA from a hole in the ground, according to Pew Research.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/pS7Yk0iqaXE” height=”1″ width=”1″ alt=””/>

Security Sophos

Hackers bypassing some types of 2FA security FBI warns

October 11, 2019 0 Comments 2-factor Authentication, 2fa, FBI, MFA, multi-factor authentication, security threats, SIM swaps, two-factor authentication, vulnerability, WebAuthn, youtube

Credit to Author: John E Dunn| Date: Fri, 11 Oct 2019 11:13:06 +0000

Some types of 2FA security can no longer be guaranteed to keep the bad guys out, the FBI warned US companies.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/M0mTuBNjc54″ height=”1″ width=”1″ alt=””/>

Security Sophos

YouTube ‘influencers’ get 2FA tokens phished

September 24, 2019 0 Comments 2-factor Authentication, 2fa, account hijacking, Google, modlishka, otp, reverse proxy toolkit, security threats, Social networks, titan, two-factor authentication, u2f, youtube, yubico

Credit to Author: Lisa Vaas| Date: Tue, 24 Sep 2019 14:50:29 +0000

100K or so creators in the YouTube car community were targeted by a phishing campaign that captured 2FA codes.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/G-FEjS09n3I” height=”1″ width=”1″ alt=””/>

Security Sophos

Google fixes Chromebook 2FA flaw in ‘built-in security key’

September 16, 2019 0 Comments 2-factor Authentication, 2fa, chrome os, chromebook, fido u2f, Google, security threats, Technologies, two-factor authentication, u2f, vulnerability

Credit to Author: John E Dunn| Date: Mon, 16 Sep 2019 11:35:33 +0000

Google has discovered a flaw in a Chromebook security feature which allows owners to press their device’s power button to initiate U2F 2FA.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/wxhr_hHEAl8″ height=”1″ width=”1″ alt=””/>

MalwareBytes Security

5 simple steps to securing your remote employees

September 4, 2019 0 Comments 2fa, approved device list, bring your own device, Business, byod, encryption, Find my iPhone, Find my Mobile, governance, IDG Connect, jailbreak, man-in-the-middle, man-in-the-middle attack, multi-factor authentication, passcode, password, public Wi-Fi, RBAC, remote, remote employees, remote wiping, remote workforce, role-based access control, single sign-on, sso, two-factor authentication, vpn

Credit to Author: David Ruiz| Date: Wed, 04 Sep 2019 14:06:26 +0000

Modern businesses require modern cybersecurity, and modern cybersecurity means more than just implementing the latest tech. It also means implementing good governance.

Categories:

Business

Tags: 2fa approved device list bring your own device byod encryption Find my iPhone Find my Mobile governance IDG Connect jailbreak man-in-the-middle man-in-the-middle attack multi-factor authentication passcode password public Wi-Fi RBAC remote remote employees remote wiping remote workforce role-based access control single sign-on sso two-factor authentication vpn

(Read more…)

The post 5 simple steps to securing your remote employees appeared first on Malwarebytes Labs.

MalwareBytes Security

TrickBot adds new trick to its arsenal: tampering with trusted texts

September 3, 2019 0 Comments 2fa, account takeover fraud, ATO, Authy, C&C, Dell Secureworks, dynamic webinject, dyreza, emotet, Eternal Romance, EternalBlue, EternalChampion, Gold Blackburn, Google Authenticator, hasherezade, point-of-sale, port-out fraud, POS, SIM hijacking, SIM swapping, Sprint, T-Mobile, thetrick, trickbot, trickloader, trickster, Trojan.TrickBot, Trojans, two-factor authentication, Verizon Wireless

Credit to Author: Jovi Umawing| Date: Tue, 03 Sep 2019 15:26:01 +0000

TrickBot’s latest feature allows it to tamper with the web sessions of users from Verizon, T-Mobile, and Sprint mobile carriers.

Categories:

Trojans

Tags: 2fa account takeover fraud ATO Authy C&C Dell Secureworks dynamic webinject dyreza emotet Eternal Romance EternalBlue EternalChampion Gold Blackburn Google Authenticator hasherezade point-of-sale port-out fraud POS SIM hijacking SIM swapping Sprint T-Mobile thetrick trickbot trickloader trickster Trojan.TrickBot two-factor authentication Verizon Wireless

Security Sophos

GitHub joins WebAuthn club

August 27, 2019 0 Comments FIDO2, Microsoft, Organisations, two-factor authentication, Web Authentication, WebAuthn, Yubikey

Credit to Author: Danny Bradbury| Date: Tue, 27 Aug 2019 10:33:09 +0000

GitHub is the latest company to support WebAuthn, a new standard that makes logging into online services using a browser more secure.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/pL1_CDzIPLA” height=”1″ width=”1″ alt=””/>

MalwareBytes Security