{"id":7994,"date":"2022-05-30T12:08:38","date_gmt":"2022-05-30T12:08:38","guid":{"rendered":"https:\/\/outofsite.biz\/cynance\/?p=7994"},"modified":"2022-05-30T12:08:40","modified_gmt":"2022-05-30T12:08:40","slug":"poor-password-security-is-everyones-problem","status":"publish","type":"post","link":"https:\/\/outofsite.biz\/cynance\/poor-password-security-is-everyones-problem\/","title":{"rendered":"Poor Password Security is Everyone&#8217;s Problem"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"7994\" class=\"elementor elementor-7994\">\n\t\t\t\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-45e0897e elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"45e0897e\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-2a13f229\" data-id=\"2a13f229\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-264884f6 elementor-widget elementor-widget-text-editor\" data-id=\"264884f6\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.11.5 - 14-03-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#818a91;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#818a91;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p>Isn\u2019t it great to be able to have all the information you could possibly need for any car journey at your fingertips? And even better to get rewards for using the car? But sadly, nothing ever comes for free as customers of\u00a0General Motors\u00a0discovered recently.<\/p><p>Once again mainstream media headlines have been consumed with news of an attack on General Motors. Except that it wasn\u2019t really on General Motors, but it kind of was.<\/p><p>During April,\u00a0GM\u00a0noticed fraudulent logins and reward point redemptions on customer accounts. On further investigation the company also discovered that certain sensitive information was exposed to the attackers, including usernames and contact information, location data, wi-fi hotspots (and passwords) and connected friends and family.<\/p><p>The attack technique was an oldie but a goodie &#8211; Credential stuffing. Attackers were able to try credentials obtained from an unrelated data breach to see which usernames and passwords matched legitimate GM customers and log into their accounts. Credential stuffing is effective as many \u2018users\u2019 recycle usernames and\u00a0passwords\u00a0across multiple accounts.<\/p><p>While GM have contained the attack, notified all customers, and said that the cause of the attack was \u2018customers\u2019 own poor cybersecurity practices\u2019, this does not let vendors off the hook. Once attackers have access to accounts, they can combine that foothold with more sophisticated attack techniques to launch larger scale attack campaigns.<\/p><p>Vendors should always take steps to protect customer accounts, that go far beyond the protections GM appears to have in place (their advice to customers was to change their account passwords, which will only offer partial protection).<\/p><p>Instead, help customers protect their own accounts with the following best practices:<\/p><p>Encourage unique passwords &#8211; remind customers of the impact of recycling credentials.<\/p><p>Reduce reliance on passwords &#8211; implement MFA on accounts, especially for logins on a new device. MFA reduces vulnerability to credential stuffing as it adds a final first step.<\/p><p>Prevent users logging into accounts on more than one device or browser at a time. Initiating automatic logout on the open account, or a warning that this will log them out of an already open account will alert customers to a problem on their account.<\/p><p>Fight back against credential stuffing brute force attacks by placing limits on log-in attempts.<\/p><p>After all, isn\u2019t it better to keep attackers from ever getting any kind of foothold into systems?<\/p><p>Stay safe<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Isn\u2019t it great to be able to have all the information you could possibly need for any car journey at your fingertips? And even better to get rewards for using the car? But sadly, nothing ever comes for free as customers of&nbsp;General Motors&nbsp;discovered recently. Once again mainstream media headlines have been consumed with news of&hellip;<\/p>\n","protected":false},"author":10,"featured_media":8002,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[63,62],"_links":{"self":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts\/7994"}],"collection":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/comments?post=7994"}],"version-history":[{"count":7,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts\/7994\/revisions"}],"predecessor-version":[{"id":8001,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts\/7994\/revisions\/8001"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/media\/8002"}],"wp:attachment":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/media?parent=7994"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/categories?post=7994"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/tags?post=7994"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}