Whitehouse Doubles Down on the Imperative for Phishing-Resistant MFA
In today’s online world, the importance of robust cybersecurity measures cannot be overstated. Cyber threats continue to evolve, and organizations, both public and private, face a constant battle to protect sensitive data from malicious actors. Yesterday, a significant event, the Multifactor Authentication (MFA) Modernization Symposium, was jointly hosted by the ... Read More
Turbulence In Banking: Navigating the Cyber Risk
With recent events involving Silicon Valley Bank and Signature Bank fresh in our minds, investors and financial institutions both big and small are looking to reduce exposure and risk ... Read More
How to Improve Okta Security
More than 140 organizations were recently breached through their Okta SSO credentials. Okta, one of the most widely-used single sign-on (SSO) providers, makes authentication into systems more convenient but also, as these attacks demonstrate, equally susceptible to attacks. Hackers were able to bypass Okta security processes to log into scores ... Read More
Passwordless vs. MFA: What’s the Difference?
Enterprise cybersecurity is under assault from unprecedented threats, exacerbated by the expanded attack surfaces brought about by remote work. For example, research from HP shows there was a 238% increase in cyberattack volume over the pandemic, with those numbers continuing to rise today. ... Read More
Multi-Factor Authentication in Financial Services
The financial services and banking industries are among cyberattackers' most highly valued targets. Arguably, they're also the most strictly regulated in terms of data and customer protection. For the first five years of its major monitoring report on cyberattacks, IBM's X-Force found that the finance industry was the leading target ... Read More
Passwordless MFA Goes Mainstream
Apple made the announcement that it’s “killing the password” when it comes to authentication. This is after the previous announcement in May where tech giants including Apple, Google and Microsoft announced that each is committed to expanded support for the FIDO standard to accelerate the availability of passwordless sign-ins. For ... Read More
Why Passwordless Desktop MFA Is Critical for Organizational Security
Most authentication and authorization systems are geared toward controlling access to enterprise systems and services. While this is understandable, it overlooks one glaring vulnerability: the endpoints to those networks. Single sign-on (SSO) solutions, for example, focus on authenticating users to access corporate applications and websites. Access to the endpoint itself ... Read More
Takeaways From the 2022 DBIR: It All Comes Back to Passwords
Like clockwork for the last 15 years, the Verizon Data Breach Investigations Report (more affectionately known as “The DBIR”) was released today. It contains 108 pages of detailed information and insights regarding types of attacks, attack surfaces, attack actors and more. The data is sliced and diced in so many ... Read More
How Secure is Critical Infrastructure?
Watch the presentation from CISA’s ICSJWG Spring Meeting: Recently, HYPR partnered with the CISA Industrial Control Systems Joint Working Group (ICSJWG) to examine the latest CISA guidance around identity and multi-factor authentication. While that spring meeting session is over, we re-recorded it for the general public.You can watch it here ... Read More
Six Best Practices to Secure Authentication for Energy and Utilities
The clear and present cyberthreat to energy and utility companies has taken center stage with the recent CISA (Alert AA22-083A) and FBI warnings about Russia-based cyberattacks on the energy sector. Even before the warnings, however, the 2021 Colonial Pipeline hack underscored the dangers from cyber vulnerabilities in this critical industry. Tens ... Read More
