Expert(s):
Director of Security Services, Security Evangelist feature_status*/ ?>
OneSpan

Comments Dotted : 3
July 10, 2020

Experts Insight On New Dark Web Audit Reveals 15 Billion Stolen Logins
Hackers have all the information they need to attack billions of users today.
We have been watching the number of stolen credentials rise for over 20 years now, we should not be surprised that we have finally eclipsed the 15 billion credentials number. Concerns are also heightened during a time when many people are still working remotely under lockdown, which presents a field day for hackers of all types, as digital customers are a prime target for cyber-attacks. Now more than ever, users should understand that using a single form of authentication such as a password or.....Read More
We have been watching the number of stolen credentials rise for over 20 years now, we should not be surprised that we have finally eclipsed the 15 billion credentials number. Concerns are also heightened during a time when many people are still working remotely under lockdown, which presents a field day for hackers of all types, as digital customers are a prime target for cyber-attacks. Now more than ever, users should understand that using a single form of authentication such as a password or SMS text or a knowledge-based question and answer, is open to compromise. The web and mobile applications as well as the platforms they run on have numerous holes and backdoors which allow hackers to easily attack using these credentials. Technologies such as multi-factor authentication can help protect the stolen credentials, while technologies such as application shielding can help protect the applications from being attacked. These technologies help strengthen security on the consumer side, but banks can help protect their customers as well by ensuring their risk analytics technologies are up to date and are checking real-time transactions across all applications and channels, looking for anomalies and patterns that are the hallmark of an attack. Hackers have all the information they need to attack billions of users today, but consumers and financial institutions can make things more difficult if the correct technologies are applied.  Read Less
April 01, 2020

Industry Leaders And Cybersecurity Experts Insight On Marriott International Data Breach
Instead, organizations should look to implement risk-based tools that adapt to the changes.
As a Marriott customer myself, it is very disheartening that they apparently did not learn from their first missteps. Security is easily overlooked and often misplaced trust leads to failures such as this. Large organizations can often find it difficult to implement a one-size fits all authentication and security plan. From my experience, a one-size fits all approach never works and seems to leave the door open for hackers to break through. Instead, organizations should look to implement.....Read More
As a Marriott customer myself, it is very disheartening that they apparently did not learn from their first missteps. Security is easily overlooked and often misplaced trust leads to failures such as this. Large organizations can often find it difficult to implement a one-size fits all authentication and security plan. From my experience, a one-size fits all approach never works and seems to leave the door open for hackers to break through. Instead, organizations should look to implement risk-based tools that adapt to the changes. Businesses this large, that are still having problems with their security need to bring in outside help and implement the appropriate technology such as multi-factor authentication, behavioral analysis, biometrics, and even data from third-party tools as soon as possible, to ensure that the right level of security is applied at the right time.  Read Less
November 07, 2019

Experts Comments On Facebook Reveals Another Privacy Breach, This Time Involving Developers
Now Facebook has made a change to their privacy policy and is ensuring that applications adhere to that policy.
In my view, Facebook was reviewing their policies and how they were implemented, then came across an unintended flaw in their APIs that allowed certain developers access to information that they now restrict. From Facebook’s explanation on their blog, most of these apps were designed to help manage people within a group. The most important thing to remember here is that the original group administrator had to add and approve these applications, they also had access to the restricted data. Now .....Read More
In my view, Facebook was reviewing their policies and how they were implemented, then came across an unintended flaw in their APIs that allowed certain developers access to information that they now restrict. From Facebook’s explanation on their blog, most of these apps were designed to help manage people within a group. The most important thing to remember here is that the original group administrator had to add and approve these applications, they also had access to the restricted data. Now Facebook has made a change to their privacy policy and is ensuring that applications adhere to that policy. From a consumer standpoint, this should be an indicator to go and check the groups that you belong to, make sure you agree with the apps the group administrator has granted permissions to use and ask to find out what types of data those apps have access to. If you disagree with the group’s privacy, then remove yourself from the group so they will stop having access to it. It is important that consumers stay vigilant when it comes to their privacy.  Read Less