Cybersecurity: Authentication, Identity & Privacy

Most recent stories in Cybersecurity: Authentication, Identity & Privacy

• 

  I Am I Authentications

  

  1 day ago

  Vietnam hit hardest by brute-force cyberattacks in Southeast Asia - VnExpress International

  vnexpress.net - Luu Qy

  Brute-force remains a primary method for cybercriminals infiltrating businesses in the region, according to cybersecurity firm Kaspersky. Its systems …

• 

  I Am I Authentications

  

  3 days ago

  19 Billion Stolen Passwords For Sale Online — New Warnings Issued

  Forbes - Davey Winder

  I recently reported how an incredible 19 billion stolen passwords had been found to have been published on the dark web and criminal marketplaces online. That article went viral in a way I never expected, but that’s a good thing considering what has emerged since. Two new warnings have been issued, …

• 

  I Am I Authentications

  

  6 days ago

  World's first CPU-level ransomware can "bypass every freaking traditional technology we have out there" — new firmware-based attacks could usher in new era of unavoidable ransomware

  tomshardware.com - Stephen Warwick

  Rapid7's Christiaan Beek has taken CPU ransomware to proof of concept.

• 

  I Am I Authentications

  

  May 12

  Hackers Exploiting Legacy Protocols in Microsoft Entra ID to Bypass MFA & Conditional Access

  cybersecuritynews.com - Tushar Subhra Dutta

  A sophisticated campaign targeting Microsoft Entra ID through legacy authentication protocols has been uncovered, operating between March 18 and …

• 

  I Am I Authentications

  

  

  This Nasty Email Attack Bypasses Security, Steals Passwords

  Forbes - Davey Winder

  It might sound like an old B-movie horror film, but the blob is very real and very scary nonetheless. With email increasingly coming under attack from threat actors, and stolen passwords often used to gain initial access to email accounts, anything that combines the two things is a security …

• 

  I Am I Authentications

  

  Warning — 19 Billion Compromised Passwords Have Been Published Online

  Forbes - Davey Winder

  Update, May 6, 2025: This story, originally published May 3, has been updated with details of the SMS phishing threat posed by the Chinese Panda Shop cybercrime group, and an open letter to the cybersecurity industry asking why the phishing threat behind the stolen passwords epidemic has yet to be …