toad.social

knoppix🔐 Proton released Proton Authenticator — a secure, open-source 2FA app available on desktop and mobile.Features include end-to-end encrypted sync 🔒, easy import/export 🔄, biometric & PIN protection 🔐, and offline access 📱💻 Free on iOS, Android, macOS, Windows, and Linux.<a href="https://mastodon.social/@protonprivacy" class="u-url mention" rel="nofollow noopener" target="_blank">@protonprivacy</a> <a href="https://proton.me/blog/authenticator-app" rel="nofollow noopener" translate="no" target="_blank">https://proton.me/blog/authenticator-app</a><a href="https://mastodon.social/tags/Proton" class="mention hashtag" rel="nofollow noopener" target="_blank">#Proton</a> <a href="https://mastodon.social/tags/ProtonPrivacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#ProtonPrivacy</a> <a href="https://mastodon.social/tags/ProtonAuthenticator" class="mention hashtag" rel="nofollow noopener" target="_blank">#ProtonAuthenticator</a> <a href="https://mastodon.social/tags/2FA" class="mention hashtag" rel="nofollow noopener" target="_blank">#2FA</a> <a href="https://mastodon.social/tags/MFA" class="mention hashtag" rel="nofollow noopener" target="_blank">#MFA</a> <a href="https://mastodon.social/tags/Privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#Privacy</a> <a href="https://mastodon.social/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#Security</a> <a href="https://mastodon.social/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://mastodon.social/tags/OpenSource" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenSource</a> <a href="https://mastodon.social/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> <a href="https://mastodon.social/tags/Windows" class="mention hashtag" rel="nofollow noopener" target="_blank">#Windows</a> <a href="https://mastodon.social/tags/Android" class="mention hashtag" rel="nofollow noopener" target="_blank">#Android</a> <a href="https://mastodon.social/tags/MacOS" class="mention hashtag" rel="nofollow noopener" target="_blank">#MacOS</a> <a href="https://mastodon.social/tags/iOS" class="mention hashtag" rel="nofollow noopener" target="_blank">#iOS</a> <a href="https://mastodon.social/tags/Encryption" class="mention hashtag" rel="nofollow noopener" target="_blank">#Encryption</a> <a href="https://mastodon.social/tags/TechNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechNews</a> <a href="https://mastodon.social/tags/Infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#Infosec</a> <a href="https://mastodon.social/tags/DataProtection" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataProtection</a>

Erik van Straten<a href="https://tech.lgbt/@nekodojo" class="u-url mention" rel="nofollow noopener" target="_blank">@nekodojo</a> <a href="https://federate.social/@jik" class="u-url mention" rel="nofollow noopener" target="_blank">@jik</a> : thank you for sharing your thoughts!To add to them: a TOTP app is a stupid password manager. Most people do not understand that it more than doubles your risk of account lockout.And that is apart from other risks excellently described Conor Gilsenan (<a href="https://infosec.exchange/@conorgil" class="u-url mention" rel="nofollow noopener" target="_blank">@conorgil</a> ) et al. in <a href="https://www.usenix.org/conference/usenixsecurity23/presentation/gilsenan" rel="nofollow noopener" translate="no" target="_blank">https://www.usenix.org/conference/usenixsecurity23/presentation/gilsenan</a> (and <a href="https://github.com/blues-lab/totp-app-analysis-public" rel="nofollow noopener" translate="no" target="_blank">https://github.com/blues-lab/totp-app-analysis-public</a>).Twilio Authy being one of the worst (echoed by <a href="https://www.bleepingcomputer.com/news/security/hackers-abused-api-to-verify-millions-of-authy-mfa-phone-numbers/" rel="nofollow noopener" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/hackers-abused-api-to-verify-millions-of-authy-mfa-phone-numbers/</a>).And, like SMS, TOTP apps do not protect against non-dumb AitM * attacks (Microsoft's endlessly repeated 99.9% reduction in change of getting hacked when using 2FA, extremely irritates me - considering <a href="https://techcommunity.microsoft.com/blog/microsoft-entra-blog/all-your-creds-are-belong-to-us/855124" rel="nofollow noopener" translate="no" target="_blank">https://techcommunity.microsoft.com/blog/microsoft-entra-blog/all-your-creds-are-belong-to-us/855124</a> from 2019 - and, although an advertisement, IMO a good article: <a href="https://www.bleepingcomputer.com/news/security/mfa-matters-but-it-isnt-enough-on-its-own/" rel="nofollow noopener" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/mfa-matters-but-it-isnt-enough-on-its-own/</a>).* Attacker/Adversary in the Middle.IMO, the nr. 1 advantage of passkeys is the "built in" domain name check - which makes phishing attacks a *lot* harder (albeit not impossible: <a href="https://infosec.exchange/@ErikvanStraten/112914050216821746" rel="nofollow noopener" translate="no" target="_blank">https://infosec.exchange/@ErikvanStraten/112914050216821746</a>).The fact that stealing private keys is next to impossible, does not protect against device or browser compromise: after logging in using your ultra-secure MFA, your authentication gets replaced by a 1FA session cookie (or something similar). Most websites do NOT bind such cookies to the client's IP-address, making them prime "copytheft" targets (<a href="https://labs.beazley.security/articles/ghost-in-the-zip-or-new-pxa-stealer-and-its-telegram-powered-ecosystem" rel="nofollow noopener" translate="no" target="_blank">https://labs.beazley.security/articles/ghost-in-the-zip-or-new-pxa-stealer-and-its-telegram-powered-ecosystem</a>).Also, for an attacker with access to your credentials record on a webserver, indeed there's no point in "copystealing" your passkey's/YubiKey's public key. However, the attacker can REPLACE your pubkey with theirs, or add their own. Those pubkeys are NOT wrapped in a certificate (signed by a *trustworthy* third party) proving who generated the keypair. And there are no revocation facilities in case your device gets stolen.Furthermore, passkey downgrade-to-weaker-auth attacks pose a threat BECAUSE you MAY lose them (or access to them).For example, on Android, if you want to change (or remove) your "sync passprase", Google tells you to tap "Delete data" (see the screenshot below). Adam Langley's (<a href="https://infosec.exchange/@agl" class="u-url mention" rel="nofollow noopener" target="_blank">@agl</a> ) pathetic joke "This might delete some data from your devices" [1] actually means that "you'll lose all of your passkeys" (on all of your synced Android devices; contrary to popular belief, Android passkeys are cloud based).[1] <a href="https://seclists.org/fulldisclosure/2024/Feb/15" rel="nofollow noopener" translate="no" target="_blank">https://seclists.org/fulldisclosure/2024/Feb/15</a>A decent password manager that checks for the domain name (i.e. using AutoFill on Android or iOS/iPadOS) is not a bad idea after all.Online auth is HARD. Let's not lie that it can be made simple. <a href="https://infosec.exchange/tags/Weak2FA" class="mention hashtag" rel="nofollow noopener" target="_blank">#Weak2FA</a> <a href="https://infosec.exchange/tags/TOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#TOTP</a> <a href="https://infosec.exchange/tags/SMS2FA" class="mention hashtag" rel="nofollow noopener" target="_blank">#SMS2FA</a> <a href="https://infosec.exchange/tags/2FA" class="mention hashtag" rel="nofollow noopener" target="_blank">#2FA</a> <a href="https://infosec.exchange/tags/MFA" class="mention hashtag" rel="nofollow noopener" target="_blank">#MFA</a> <a href="https://infosec.exchange/tags/Passkeys" class="mention hashtag" rel="nofollow noopener" target="_blank">#Passkeys</a> <a href="https://infosec.exchange/tags/WebAutn" class="mention hashtag" rel="nofollow noopener" target="_blank">#WebAutn</a> <a href="https://infosec.exchange/tags/FIDO2" class="mention hashtag" rel="nofollow noopener" target="_blank">#FIDO2</a> <a href="https://infosec.exchange/tags/Yubikkey" class="mention hashtag" rel="nofollow noopener" target="_blank">#Yubikkey</a> <a href="https://infosec.exchange/tags/Authentication" class="mention hashtag" rel="nofollow noopener" target="_blank">#Authentication</a> <a href="https://infosec.exchange/tags/OnlineAuthentication" class="mention hashtag" rel="nofollow noopener" target="_blank">#OnlineAuthentication</a> <a href="https://infosec.exchange/tags/Impersonation" class="mention hashtag" rel="nofollow noopener" target="_blank">#Impersonation</a> <a href="https://infosec.exchange/tags/Passwords" class="mention hashtag" rel="nofollow noopener" target="_blank">#Passwords</a> <a href="https://infosec.exchange/tags/PasswordManager" class="mention hashtag" rel="nofollow noopener" target="_blank">#PasswordManager</a> <a href="https://infosec.exchange/tags/AutoFill" class="mention hashtag" rel="nofollow noopener" target="_blank">#AutoFill</a>

nemo™ 🇺🇦🚨 New downgrade attack can bypass FIDO passkey security, exposing “phishing-resistant” accounts to adversary-in-the-middle (AiTM) attacks. Proofpoint warns this method could target organizations relying on fallback MFA options. Stay vigilant & defend with FIDO-only policies! 🔐🛡️ <a href="https://mas.to/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://mas.to/tags/FIDO" class="mention hashtag" rel="nofollow noopener" target="_blank">#FIDO</a> <a href="https://mas.to/tags/MFA" class="mention hashtag" rel="nofollow noopener" target="_blank">#MFA</a> <a href="https://cyberinsider.com/new-downgrade-attack-threatens-security-of-fido-passkeys/" rel="nofollow noopener" translate="no" target="_blank">https://cyberinsider.com/new-downgrade-attack-threatens-security-of-fido-passkeys/</a> <a href="https://mas.to/tags/newz" class="mention hashtag" rel="nofollow noopener" target="_blank">#newz</a>

Bytes EuropeEU Ambassador Jānis Mažeiks concludes his mandate in the Republic of Moldova <a href="https://www.byteseu.com/1285603/" rel="nofollow noopener" translate="no" target="_blank">https://www.byteseu.com/1285603/</a> <a href="https://pubeurope.com/tags/ambassador" class="mention hashtag" rel="nofollow noopener" target="_blank">#ambassador</a> <a href="https://pubeurope.com/tags/eu" class="mention hashtag" rel="nofollow noopener" target="_blank">#eu</a> <a href="https://pubeurope.com/tags/mandate" class="mention hashtag" rel="nofollow noopener" target="_blank">#mandate</a> <a href="https://pubeurope.com/tags/MFA" class="mention hashtag" rel="nofollow noopener" target="_blank">#MFA</a> <a href="https://pubeurope.com/tags/Moldova" class="mention hashtag" rel="nofollow noopener" target="_blank">#Moldova</a>

Threat InsightProofpoint threat researchers have uncovered a way to sidestep FIDO-based authentication, a protection method used to block credential phishing and account takeover (ATO).Blog: <a href="https://www.proofpoint.com/us/blog/threat-insight/dont-phish-let-me-down-fido-authentication-downgrade" rel="nofollow noopener" translate="no" target="_blank">https://www.proofpoint.com/us/blog/threat-insight/dont-phish-let-me-down-fido-authentication-downgrade</a>While the tactic has not yet been observed in the wild, the discovery is a significant emerging threat and exposes targets to adversary-in-the-middle (AiTM) threats.Read our blog to understand how this potential threat questions the reliability of FIDO (Fast Identity Online) passkey implementations, an authentication method currently viewed as robust for verifying user identities and recommended for improving online security. <a href="https://infosec.exchange/tags/FIDO" class="mention hashtag" rel="nofollow noopener" target="_blank">#FIDO</a> <a href="https://infosec.exchange/tags/authentication" class="mention hashtag" rel="nofollow noopener" target="_blank">#authentication</a> <a href="https://infosec.exchange/tags/ATO" class="mention hashtag" rel="nofollow noopener" target="_blank">#ATO</a> <a href="https://infosec.exchange/tags/MFA" class="mention hashtag" rel="nofollow noopener" target="_blank">#MFA</a>

Bytes EuropeUkrainian and Estonian FMs discuss importance of European unity for global stability <a href="https://www.byteseu.com/1277994/" rel="nofollow noopener" translate="no" target="_blank">https://www.byteseu.com/1277994/</a> <a href="https://pubeurope.com/tags/Estonia" class="mention hashtag" rel="nofollow noopener" target="_blank">#Estonia</a> <a href="https://pubeurope.com/tags/MFA" class="mention hashtag" rel="nofollow noopener" target="_blank">#MFA</a>

TechNaduBoardroom security talks always have: ✅ MFA advocates ✅ Phishing trainers ❌ The “password spreadsheet” guySecurity basics matter. MFA + phishing awareness + strong passwords block the majority of breaches.What’s the worst advice you’ve heard in a security meeting? <a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://infosec.exchange/tags/MFA" class="mention hashtag" rel="nofollow noopener" target="_blank">#MFA</a> <a href="https://infosec.exchange/tags/Phishing" class="mention hashtag" rel="nofollow noopener" target="_blank">#Phishing</a> <a href="https://infosec.exchange/tags/PasswordSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#PasswordSecurity</a>

Pyrzout :vm:From legacy to SaaS: Why complexity is the enemy of enterprise security <a href="https://www.helpnetsecurity.com/2025/08/11/robert-buljevic-bridge-it-legacy-saas-security/" rel="nofollow noopener" translate="no" target="_blank">https://www.helpnetsecurity.com/2025/08/11/robert-buljevic-bridge-it-legacy-saas-security/</a> <a href="https://social.skynetcloud.site/tags/digitaltransformation" class="mention hashtag" rel="nofollow noopener" target="_blank">#digitaltransformation</a> <a href="https://social.skynetcloud.site/tags/identityverification" class="mention hashtag" rel="nofollow noopener" target="_blank">#identityverification</a> <a href="https://social.skynetcloud.site/tags/securityawareness" class="mention hashtag" rel="nofollow noopener" target="_blank">#securityawareness</a> <a href="https://social.skynetcloud.site/tags/accessmanagement" class="mention hashtag" rel="nofollow noopener" target="_blank">#accessmanagement</a> <a href="https://social.skynetcloud.site/tags/authentication" class="mention hashtag" rel="nofollow noopener" target="_blank">#authentication</a> <a href="https://social.skynetcloud.site/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://social.skynetcloud.site/tags/enterprise" class="mention hashtag" rel="nofollow noopener" target="_blank">#enterprise</a> <a href="https://social.skynetcloud.site/tags/Don" class="mention hashtag" rel="nofollow noopener" target="_blank">#Don</a>'tmiss <a href="https://social.skynetcloud.site/tags/zerotrust" class="mention hashtag" rel="nofollow noopener" target="_blank">#zerotrust</a> <a href="https://social.skynetcloud.site/tags/Features" class="mention hashtag" rel="nofollow noopener" target="_blank">#Features</a> <a href="https://social.skynetcloud.site/tags/Hotstuff" class="mention hashtag" rel="nofollow noopener" target="_blank">#Hotstuff</a> <a href="https://social.skynetcloud.site/tags/BridgeIT" class="mention hashtag" rel="nofollow noopener" target="_blank">#BridgeIT</a> <a href="https://social.skynetcloud.site/tags/strategy" class="mention hashtag" rel="nofollow noopener" target="_blank">#strategy</a> <a href="https://social.skynetcloud.site/tags/News" class="mention hashtag" rel="nofollow noopener" target="_blank">#News</a> <a href="https://social.skynetcloud.site/tags/CISO" class="mention hashtag" rel="nofollow noopener" target="_blank">#CISO</a> <a href="https://social.skynetcloud.site/tags/SaaS" class="mention hashtag" rel="nofollow noopener" target="_blank">#SaaS</a> <a href="https://social.skynetcloud.site/tags/tips" class="mention hashtag" rel="nofollow noopener" target="_blank">#tips</a> <a href="https://social.skynetcloud.site/tags/MFA" class="mention hashtag" rel="nofollow noopener" target="_blank">#MFA</a>

mutteripannuWhat authentication apps do people who don’t wanna use Microsoft or Google, use? Recommendations? <a href="https://mstdn.social/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://mstdn.social/tags/2FA" class="mention hashtag" rel="nofollow noopener" target="_blank">#2FA</a> <a href="https://mstdn.social/tags/MFA" class="mention hashtag" rel="nofollow noopener" target="_blank">#MFA</a> <a href="https://mstdn.social/tags/AskFedi" class="mention hashtag" rel="nofollow noopener" target="_blank">#AskFedi</a> Edit: should’ve specified that for the time being, I am on iOS.

Dissent Doe :cupofcoffee:Claim DENIED: Lack of <a href="https://infosec.exchange/tags/MFA" class="mention hashtag" rel="nofollow noopener" target="_blank">#MFA</a> cost the City of Hamilton in Canada $18.3 million:<a href="https://www.cp24.com/local/hamilton/2025/07/31/hamilton-taxpayers-on-the-hook-for-full-183m-cyberattack-repair-bill-after-insurance-claim-denied/" rel="nofollow noopener" translate="no" target="_blank">https://www.cp24.com/local/hamilton/2025/07/31/hamilton-taxpayers-on-the-hook-for-full-183m-cyberattack-repair-bill-after-insurance-claim-denied/</a><a href="https://infosec.exchange/tags/ransomware" class="mention hashtag" rel="nofollow noopener" target="_blank">#ransomware</a> <a href="https://infosec.exchange/tags/databreach" class="mention hashtag" rel="nofollow noopener" target="_blank">#databreach</a> <a href="https://infosec.exchange/tags/cyberinsurance" class="mention hashtag" rel="nofollow noopener" target="_blank">#cyberinsurance</a>

Bytes EuropeInvesting In Technology in a Challenging Farm Economy <a href="https://www.byteseu.com/1261284/" rel="nofollow noopener" translate="no" target="_blank">https://www.byteseu.com/1261284/</a> <a href="https://pubeurope.com/tags/agtech" class="mention hashtag" rel="nofollow noopener" target="_blank">#agtech</a> <a href="https://pubeurope.com/tags/economy" class="mention hashtag" rel="nofollow noopener" target="_blank">#economy</a> <a href="https://pubeurope.com/tags/FarmEconomy" class="mention hashtag" rel="nofollow noopener" target="_blank">#FarmEconomy</a> <a href="https://pubeurope.com/tags/MFA" class="mention hashtag" rel="nofollow noopener" target="_blank">#MFA</a>

Prof. Dr. Dennis-Kenji KipkerWas hilft eine <a href="https://chaos.social/tags/Cyberversicherung" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cyberversicherung</a>, wenn man ihre Vertragsbedingungen nicht einhält: Das musste die Stadt <a href="https://chaos.social/tags/Hamilton" class="mention hashtag" rel="nofollow noopener" target="_blank">#Hamilton</a> in <a href="https://chaos.social/tags/Kanada" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kanada</a> erleben, die Opfer von einem <a href="https://chaos.social/tags/Ransomware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Ransomware</a> Angriff wurde.Dabei sind IT-Wiederherstellungskosten iHv 18 Mio. USD angefallen, die man auf den Cyberversicherer umlegen wollte. Der sah jedoch <a href="https://chaos.social/tags/MFA" class="mention hashtag" rel="nofollow noopener" target="_blank">#MFA</a> als Ausschlussklausel vor - was die Stadt nicht umgesetzt hatte.Nun müssen die Bürger selbst für die Wiederherstellungskosten aufkommen:<a href="https://www.cbc.ca/news/canada/hamilton/cybersecurity-breach-1.7597713" rel="nofollow noopener" translate="no" target="_blank">https://www.cbc.ca/news/canada/hamilton/cybersecurity-breach-1.7597713</a> <a href="https://chaos.social/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a>

Marcus "MajorLinux" SummersI mean, I get why they are doing these things, but at what point do they turn this into an ecosystem you get locked into?Also, remember to two-factor your shit!Proton Releases New Two-Factor Authentication App <a href="https://www.macrumors.com/2025/07/31/proton-releases-new-two-factor-authentication-app/" rel="nofollow noopener" translate="no" target="_blank">https://www.macrumors.com/2025/07/31/proton-releases-new-two-factor-authentication-app/</a><a href="https://toot.majorshouse.com/tags/Proton" class="mention hashtag" rel="nofollow noopener" target="_blank">#Proton</a> <a href="https://toot.majorshouse.com/tags/MFA" class="mention hashtag" rel="nofollow noopener" target="_blank">#MFA</a> <a href="https://toot.majorshouse.com/tags/App" class="mention hashtag" rel="nofollow noopener" target="_blank">#App</a> <a href="https://toot.majorshouse.com/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#Security</a> <a href="https://toot.majorshouse.com/tags/Tech" class="mention hashtag" rel="nofollow noopener" target="_blank">#Tech</a>

LMG SecurityIranian cyberattacks are ramping up—and they’re hitting critical infrastructure, defense, and businesses. From AI-generated phishing and deepfake propaganda to wiper malware targeting ICS and backups, Iranian threat actors are evolving fast.In this episode of Cyberside Chats, <a href="https://infosec.exchange/@sherridavidoff" class="u-url mention" rel="nofollow noopener" target="_blank">@sherridavidoff</a> and <a href="https://infosec.exchange/@MDurrin" class="u-url mention" rel="nofollow noopener" target="_blank">@MDurrin</a> break down the latest threats, real-world incidents, and what your organization can do to prepare.🎥 Watch the video: <a href="https://youtu.be/vC29SaWdqG4" rel="nofollow noopener" translate="no" target="_blank">https://youtu.be/vC29SaWdqG4</a>🎧 Listen to the podcast: <a href="https://www.chatcyberside.com/e/the-title-of-cschats_308hyzz/" rel="nofollow noopener" translate="no" target="_blank">https://www.chatcyberside.com/e/the-title-of-cschats_308hyzz/</a><a href="https://infosec.exchange/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://infosec.exchange/tags/WiperMalware" class="mention hashtag" rel="nofollow noopener" target="_blank">#WiperMalware</a> <a href="https://infosec.exchange/tags/AIphishing" class="mention hashtag" rel="nofollow noopener" target="_blank">#AIphishing</a> <a href="https://infosec.exchange/tags/MFA" class="mention hashtag" rel="nofollow noopener" target="_blank">#MFA</a> <a href="https://infosec.exchange/tags/PatchTuesday" class="mention hashtag" rel="nofollow noopener" target="_blank">#PatchTuesday</a> <a href="https://infosec.exchange/tags/CriticalInfrastructure" class="mention hashtag" rel="nofollow noopener" target="_blank">#CriticalInfrastructure</a> <a href="https://infosec.exchange/tags/CybersideChats" class="mention hashtag" rel="nofollow noopener" target="_blank">#CybersideChats</a> <a href="https://infosec.exchange/tags/CISO" class="mention hashtag" rel="nofollow noopener" target="_blank">#CISO</a> <a href="https://infosec.exchange/tags/cyberattacks" class="mention hashtag" rel="nofollow noopener" target="_blank">#cyberattacks</a> <a href="https://infosec.exchange/tags/IT" class="mention hashtag" rel="nofollow noopener" target="_blank">#IT</a> <a href="https://infosec.exchange/tags/Infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#Infosec</a> <a href="https://infosec.exchange/tags/ITsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#ITsecurity</a> <a href="https://infosec.exchange/tags/ThreatIntel" class="mention hashtag" rel="nofollow noopener" target="_blank">#ThreatIntel</a>

Bytes EuropeMatviyenko’s visit to Switzerland – what is Ukraine’s reaction? | Ukrainian News <a href="https://www.byteseu.com/1236602/" rel="nofollow noopener" translate="no" target="_blank">https://www.byteseu.com/1236602/</a> <a href="https://pubeurope.com/tags/HeorhiyTykhyi" class="mention hashtag" rel="nofollow noopener" target="_blank">#HeorhiyTykhyi</a> <a href="https://pubeurope.com/tags/MFA" class="mention hashtag" rel="nofollow noopener" target="_blank">#MFA</a> <a href="https://pubeurope.com/tags/SpecialTribunal" class="mention hashtag" rel="nofollow noopener" target="_blank">#SpecialTribunal</a> <a href="https://pubeurope.com/tags/Switzerland" class="mention hashtag" rel="nofollow noopener" target="_blank">#Switzerland</a> <a href="https://pubeurope.com/tags/ValentinaMatvienko" class="mention hashtag" rel="nofollow noopener" target="_blank">#ValentinaMatvienko</a>

LMG SecurityFederal Cybersecurity Cuts Increase the Risks for Your OrganizationA sweeping executive order just wiped out key federal cybersecurity mandates—including SBOMs, encryption standards, and phishing-resistant MFA requirements. If your business buys software, handles sensitive data, or supports critical infrastructure, this rollback directly impacts you.Find out: ▪ Which protections were cut ▪ Why the risk has shifted to your organization ▪ What security leaders must do now to fill the gapRead our blog: <a href="https://www.lmgsecurity.com/federal-cybersecurity-cuts-raise-risks-heres-how-to-respond/" rel="nofollow noopener" translate="no" target="_blank">https://www.lmgsecurity.com/federal-cybersecurity-cuts-raise-risks-heres-how-to-respond/</a><a href="https://infosec.exchange/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://infosec.exchange/tags/FederalCybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#FederalCybersecurity</a> <a href="https://infosec.exchange/tags/SBOM" class="mention hashtag" rel="nofollow noopener" target="_blank">#SBOM</a> <a href="https://infosec.exchange/tags/MFA" class="mention hashtag" rel="nofollow noopener" target="_blank">#MFA</a> <a href="https://infosec.exchange/tags/ThirdPartyRisk" class="mention hashtag" rel="nofollow noopener" target="_blank">#ThirdPartyRisk</a> <a href="https://infosec.exchange/tags/SupplyChainSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#SupplyChainSecurity</a> <a href="https://infosec.exchange/tags/CISO" class="mention hashtag" rel="nofollow noopener" target="_blank">#CISO</a> <a href="https://infosec.exchange/tags/Infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#Infosec</a> <a href="https://infosec.exchange/tags/RiskManagement" class="mention hashtag" rel="nofollow noopener" target="_blank">#RiskManagement</a> <a href="https://infosec.exchange/tags/ITsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#ITsecurity</a> <a href="https://infosec.exchange/tags/SMB" class="mention hashtag" rel="nofollow noopener" target="_blank">#SMB</a>

Karl Voit :emacs: :orgmode:<a href="https://graz.social/tags/Authentifizierung" class="mention hashtag" rel="nofollow noopener" target="_blank">#Authentifizierung</a> mit <a href="https://graz.social/tags/FIDO2" class="mention hashtag" rel="nofollow noopener" target="_blank">#FIDO2</a> und <a href="https://graz.social/tags/Passkeys" class="mention hashtag" rel="nofollow noopener" target="_blank">#Passkeys</a> <a href="https://karl-voit.at/FIDO2-vs-Passkeys/" rel="nofollow noopener" translate="no" target="_blank">https://karl-voit.at/FIDO2-vs-Passkeys/</a>Was das ist, warum man es nutzen soll und wie man sie im Vergleich zu anderen Methoden einschätzt.<a href="https://graz.social/tags/MFA" class="mention hashtag" rel="nofollow noopener" target="_blank">#MFA</a> <a href="https://graz.social/tags/2FA" class="mention hashtag" rel="nofollow noopener" target="_blank">#2FA</a> <a href="https://graz.social/tags/FIDO" class="mention hashtag" rel="nofollow noopener" target="_blank">#FIDO</a> <a href="https://graz.social/tags/Passkey" class="mention hashtag" rel="nofollow noopener" target="_blank">#Passkey</a> <a href="https://graz.social/tags/Sicherheit" class="mention hashtag" rel="nofollow noopener" target="_blank">#Sicherheit</a> <a href="https://graz.social/tags/publicvoit" class="mention hashtag" rel="nofollow noopener" target="_blank">#publicvoit</a>

The New Oil<a href="https://mastodon.thenewoil.org/tags/Veeam" class="mention hashtag" rel="nofollow noopener" target="_blank">#Veeam</a> <a href="https://mastodon.thenewoil.org/tags/RecoveryOrchestrator" class="mention hashtag" rel="nofollow noopener" target="_blank">#RecoveryOrchestrator</a> users locked out after <a href="https://mastodon.thenewoil.org/tags/MFA" class="mention hashtag" rel="nofollow noopener" target="_blank">#MFA</a> rollout<a href="https://www.bleepingcomputer.com/news/technology/veeam-recovery-orchestrator-users-locked-out-after-mfa-rollout/" rel="nofollow noopener" translate="no" target="_blank">https://www.bleepingcomputer.com/news/technology/veeam-recovery-orchestrator-users-locked-out-after-mfa-rollout/</a><a href="https://mastodon.thenewoil.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a>

nemo™ 🇺🇦🚨 New sophisticated phishing technique “PoisonSeed” tricks users into scanning malicious QR codes, bypassing FIDO key MFA protections via cross-device sign-in! 🛡️🔐 Users must stay vigilant & organizations should strengthen monitoring. Full details: <a href="https://cyberinsider.com/new-poisonseed-attack-bypasses-fido-key-security-using-qr-codes/" rel="nofollow noopener" translate="no" target="_blank">https://cyberinsider.com/new-poisonseed-attack-bypasses-fido-key-security-using-qr-codes/</a> <a href="https://mas.to/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://mas.to/tags/MFA" class="mention hashtag" rel="nofollow noopener" target="_blank">#MFA</a> <a href="https://mas.to/tags/FIDO" class="mention hashtag" rel="nofollow noopener" target="_blank">#FIDO</a> <a href="https://mas.to/tags/PhishingAlert" class="mention hashtag" rel="nofollow noopener" target="_blank">#PhishingAlert</a> <a href="https://mas.to/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoSec</a> <a href="https://mas.to/tags/newz" class="mention hashtag" rel="nofollow noopener" target="_blank">#newz</a>

Jonathan Kamens 86 47All the positive <a href="https://federate.social/tags/userExperience" class="mention hashtag" rel="nofollow noopener" target="_blank">#userExperience</a> points <a href="https://federate.social/tags/HackerOne" class="mention hashtag" rel="nofollow noopener" target="_blank">#HackerOne</a> earned for how they were rolling out mandatory <a href="https://federate.social/tags/2FA" class="mention hashtag" rel="nofollow noopener" target="_blank">#2FA</a> were just erased by them sending out reminder email to all of their users about configuring 2FA without filtering out the users who had already done it. That's some lazy, user-hostile bullshit, is what that is. When you know which users have already followed your instructions, you don't need to waste their time making them go back and check. <a href="https://federate.social/tags/smdh" class="mention hashtag" rel="nofollow noopener" target="_blank">#smdh</a> <a href="https://federate.social/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://federate.social/tags/MFA" class="mention hashtag" rel="nofollow noopener" target="_blank">#MFA</a> <a href="https://federate.social/tags/UX" class="mention hashtag" rel="nofollow noopener" target="_blank">#UX</a>

Recent searches

Search options

Administered by:

Server stats:

#mfa