Cybersecurity Starts in the Boardroom
Let’s take a look at what good multi-factor authentication is. I am writing a mini-series for CyberAwake about the mistakes users make when choosing a secure password and how hackers can exploit those mistakes, so a quick look at MFA seems like a good idea. What is multi-factor authentication? A …
Continue reading “Move away from text- or voice-based multi-factor authentication”
What is the Insider Threat? The insider threat is one of the most difficult cyber security issues to deal with as it involves someone you trust betraying that trust behind your back. They betray that trust and exploit the access they have to privileged information or processes. Unfortunately the insider …
Continue reading “Insider Threat – How would you feel if someone betrayed your trust?”
Authentication, Authorisation and Accountability. This is the first part of a three-part series looking at the basics of the cyber security principle of “AAA”. Today we will start with Authentication It seems the easiest of principles. Everyone needs a username and password (credentials) to access any of your organisation’s systems. …
My son told me this cyber security joke, this week, as suggested material for a Because It’s Friday post. So here it is: The Cyber Security Joke I tried to use beeFsteW as a password but I was told it was not stroganoff. He’s a maths teacher! Because It’s Friday …
Continue reading “Because It’s Friday – A Cyber Security Joke and…”
This is a follow-up to an earlier story I wrote about a cyber security incident at Capita – the UK’s largest outsourcing company. An attack that is believed to have started with compromised credentials: Capita confirms hackers stole data in recent cyberattack (bleepingcomputer.com) Your takeaway from this is that credential …
