Dropbox has begun supporting USB-based security keys to improve log-in security and better protect users from phishing attempts. The Universal 2nd Factor (U2F) security keys can be used when signing in to the popular cloud storage service. This comes as a welcome security measure after Imperva researchers recently revealed a new type of attack on synchronisation services (such as Dropbox) called Man-in-the-Cloud Attacks. Ryan Kalember, VP Cybersecurity Strategy at Proofpoint, commented on the security of Dropbox. [su_note note_color=”#ffffcc” text_color=”#00000″]Ryan Kalember, VP Cybersecurity Strategy at Proofpoint : “Dropbox credential phishing has been a popular attack for some time now, so this…
Author: Ryan Kalember
We’ve all read about the cyberattack on the Office of Personnel Management (OPM). The records of 22.1 million people were compromised in what is now considered the worst cyberattack in U.S. history. With all the sensitivity around data privacy and the publicity around high-profile hacks, why was OPM still so vulnerable? When OPM’s security was found lacking a year ago, the audit revealed some positive progress, but the findings, which measure against FISMA, NIST, etc., also pointed OPM in too many directions. Given its limited resources, the great quantity of issues OPM needed to address was overwhelming, and the organization…