State of Cybercrime21 Jul 2017

Cyber Threats Are Evolving and So Must Two-Factor

Finally, after years of advocacy many popular web services have adopted two-factor authentication (2FA) as a default security measure. Unfortunately, as you might suspect attackers have figured out workarounds. For instance, attackers that intercept your PIN in a password reset man-in-the-middle attack.

So what should we do now? As the industry moves beyond 2FA, the good news is that three-factor authentication is not on the shortlist as a replacement. Google’s identity systems manager, Mark Risher said, “One of the truths we’ve found is that people won’t accept more security than they think they need.”

There have been talks about using biometrics as a promising form of authentication. In the meantime, know that using 2FA is more secure than using just a password.

Other Articles Discussed:

Singapore cybersecurity pros needs a license to conduct investigative work
White hat privilege
Android malware threatens to expose browsing history to your contacts
Websites without https are not recommended

Panelists: Cindy Ng, Rob Sobers, Mike Buckbee, Kilian Englert

Want to join us live? Save a seat here: https://www.varonis.com/state-of-cybercrime

Episoder(211)

The Ransomware That Ran Itself

More from Varonis ⬇️ Visit our website: https://www.varonis.com LinkedIn: linkedin.com/company/varonis X/Twitter: x.com/varonis Instagram: instagram.com/varonislife Want to join us live? Save a seat h...

18 Jul 38min

Megalodon Poisons Github

12 Jun 29min

The Canvas Breach

19 Mai 29min

The Axios Supply Chain Attack

The Axios supply chain attack proves attackers don’t need vulnerabilities if they can hit the assembly line. By compromising a single npm maintainer account, they were able to slip a trojan into Axios...

10 Apr 43min

Salesforce Aura Data Theft

ShinyHunters has once again placed Salesforce customers in their crosshairs – this time abusing guest user misconfigurations in public-facing Experience Cloud sites. The group claims to have compromis...

20 Mar 29min

OpenClaw & Moltbook (w/ Moriah Hara!)

OpenClaw – an opensource AI agent dubbed “Claude with hands” – has exploded across GitHub, rocketing from obscurity to 170,000 stars in just two weeks. It’s now the fastest spreading form of shadow IT...

14 Feb 43min

The React2Shell Crisis

React2Shell, the zero-click RCE exploit, is rapidly becoming one of the most significant cybersecurity incidents this year. From emergency patches causing a massive Cloudflare outage to active exploi...

15 Des 202522min

AI-Powered Espionage

A Chinese state-sponsored group weaponized Anthropic’s Claude tool to launch the first large-scale AI-driven espionage campaign, targeting more than 30 organizations across tech, finance, manufacturin...

24 Nov 202523min