In 2022 alone, over 87,000 exposed credentials tied to Fortune 1000 C-level executives were recaptured from the criminal underground, according to SpyCloud's 2023 Identity Exposure Report. The threat ...

You probably went to some trouble rolling out multifactor authentication (MFA)—picking the method, enrolling the holdouts, ...

Two weeks ago on this page, we reported on some Wordpress vulnerabilities that were caused by incorrectly generating authentication cookies. The article was a bit light on details about such cookies, ...

Google is working on a new security feature for Chrome called Device Bound Session Credentials (DBSC), meant to prevent attackers from using stolen session cookies to gain access user accounts.

October 13, 2026[Disclaimer/Purpose of this article]This article is an explanatory piece that analyzes the methods (phishing, ...

Many of the tools that organizations are deploying to isolate Internet traffic from the internal network — such as multifactor authentication, zero-trust network access, SSO, and identity provider ...

Cookie poisoning is a type of cyber attack in which a bad actor hijacks, forges, alters or manipulates a cookie to gain unauthorized access to a user's account, open a new account in the user's name ...

Question: What is session fixation and how can I protect my users from it? Session fixation is a vulnerability caused by incorrectly handling user sessions in a Web application. A user’s session is ...

The California Consumer Privacy Act ("CCPA") was enacted in early 2018 as a political compromise to stave off a poorly drafted, and plaintiff’s friendly ballot ...