Credentials, authentication and access: attackers’ favourite target.
10 articles
CISA lists a SonicWall SSLVPN flaw classified as single-factor authentication as actively exploited. An OpenSSH flaw lets some Linux accounts accept any password of 257 to 1,024 characters. Both show that "MFA enabled" is intent, not evidence. Under NIS2 Article 20, boards oversee access controls and should ask for proof that authentication works.
Persistent Windows device identifiers are becoming a critical cyber governance issue, reshaping how organizations manage identity, compliance, tracking, and risk across modern enterprise environments.
FortiBleed highlights how firewalls and VPN gateways have become critical identity risk targets, exposing why security teams must rethink access, trust, and device hardening.
A surge of 24 billion exposed credentials is forcing executives to rethink identity security, governance, and the growing business risks tied to compromised access.
Discover how cybercriminals are intensifying vishing attacks by targeting Okta identity systems. Explore the tactics used to exploit vulnerabilities in digital identity management and learn strategies to protect yourself from these sophisticated threats. Stay informed and safeguard your sensitive information in an increasingly digital world.
A massive security breach has compromised the phone numbers of 3.5 billion WhatsApp users, sparking urgent concerns over data privacy. This alarming incident serves as a critical wake-up call for Meta, raising questions about the platform’s security measures and the protection of user information. Discover what this breach means for you and how it may impact the future of WhatsApp’s security…
In the fast-evolving healthcare sector, protecting sensitive health information is both a legal and ethical obligation under HIPAA. While traditional emphasis has been on encryption and network security, password management remains a glaring vulnerability. Weak or shared passwords can lead to data breaches, contravening HIPAA’s security mandates. One robust solution is the use of password…
A simple password lapse led to the downfall of KNP Logistics, a major UK-based transportation firm with a 150-year history. In 2023, cybercriminals exploited the weak password, initiating a ransomware attack that crippled operations and halted a fleet of 500 trucks. Unable to meet a £5 million ransom demand, the company declared bankruptcy. This incident highlights the critical need for robust…
The introduction of privacy tabs in browsers aims to enhance online security by isolating and protecting user data through separate silos for each session. This innovation promises to reduce tracking and data cross-contamination, offering improved protection against advertisers and third-party data mining. As browser developers respond to growing privacy concerns and regulatory demands, these…
Recent investigations into the security of cryptographic hardware devices have highlighted concerning vulnerabilities that have the potential to compromise the integrity of systems relying on these tools for secure authentication.
The implementation
Implements the designed security (migrate, deploy, integrate) through to go-live, and proves that it works.
Explore Trusted IntegrationProof: French public financial institution
Programme management and integration of a public financial institution's public key infrastructure migration: certificates of 140 applications migrated with no service interruption, on schedule.
140 applications whose certificates were migrated with no service interruption
Tell us about your context: an expert will get back to you.
or write directly to trust@blooo.io
Your e-mail is sent from your own mail client: blooo.io stores nothing. We only use your details to reply to you. Privacy policy.