Julie Conroy – Computer Security Articles

A Breach, or Just a Forced Password Reset?

December 4, 2018 admin A Little Sunshine, Aite Group, auth0, Citrix, HaveIBeenPwned.com, Jamie Buranich, Julie Conroy, Okta, ShareFile, Troy Hunt

Credit to Author: BrianKrebs| Date: Tue, 04 Dec 2018 21:45:51 +0000

Software giant Citrix Systems recently forced a password reset for many users of its Sharefile content collaboration service, warning it would be doing this on a regular basis in response to password-guessing attacks that target people who re-use passwords across multiple Web sites. Many Sharefile users interpreted this as a breach at Citrix and/or Sharefile, but the company maintains that’s not the case. Here’s a closer look at what happened, and some ideas about how to avoid a repeat of this scenario going forward.

Independent Krebs

Fiserv Flaw Exposed Customer Data at Hundreds of Banks

August 28, 2018 admin Aite Group, Allen Weinberg, data breaches, fiserv, Glenbrook Partners, Julie Conroy, Kristian Erik Hermansen, secureinternetbank.com, The Coming Storm

Credit to Author: BrianKrebs| Date: Tue, 28 Aug 2018 13:27:55 +0000

Fiserv, Inc., a major provider of technology services to financial institutions, just fixed a glaring weakness in its Web platform that exposed personal and financial details of countless customers across hundreds of bank Web sites, KrebsOnSecurity has learned.

Independent Krebs

Simple Banking Security Tip: Verbal Passwords

November 6, 2017 admin Aite Group, Andy Greenberg, avivah litan, gartner, Julie Conroy, KBA, Other, verbal password, voice biometrics, wired

Credit to Author: BrianKrebs| Date: Mon, 06 Nov 2017 16:53:03 +0000

There was a time when I was content to let my bank authenticate me over the phone by asking for some personal identifiers (SSN/DOB) that are broadly for sale in the cybercrime underground. At some point, however, I decided this wasn’t acceptable for institutions that held significant chunks of our money, and I began taking our business away from those that wouldn’t let me add a simple verbal passphrase that needed to be uttered before any account details could be discussed over the phone.