#credentialsecurity — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #credentialsecurity, aggregated by home.social.
-
🫣 Scattered registrars. Credentials in a spreadsheet. A former provider still holding the keys to a client's domain. This is the reality of domain management that most MSPs carry quietly!
See how DNSimple eliminated this for Always Beyond, a Calgary-based MSP.
-
🫣 Scattered registrars. Credentials in a spreadsheet. A former provider still holding the keys to a client's domain. This is the reality of domain management that most MSPs carry quietly!
See how DNSimple eliminated this for Always Beyond, a Calgary-based MSP.
-
AI Agents Expose Security Risks in 93% of Organizations
Most organizations are unwittingly rolling out AI agents with access to sensitive tasks, leaving them vulnerable to security breaches. In fact, only 32% of teams feel very confident they could recover from exposed admin credentials, highlighting a disturbing gap in control and preparedness.
#AiSecurityRisks #IdentityManagement #ArtificialIntelligence #EmergingThreats #CredentialSecurity
-
DORA Mandates Credential Security as Financial Risk Control
What happens when a threat actor waltzes into your network with a legitimate username and password - can your controls stop them? With DORA now in effect, EU financial institutions must prioritize credential security as a critical risk control, shifting from best practice to binding regulation.
#DigitalOperationalResilienceAct #CredentialSecurity #FinancialInstitutions #EuRegulations #FinancialRiskControl
-
Rhaetian Railway has confirmed unauthorized access to customer data linked to its Vereina car shuttle ticketing system.
While card data was not impacted, exposed account credentials raise familiar questions around access control, credential storage, and customer-facing attack surfaces in transport infrastructure.
This incident reinforces the importance of continuous monitoring and credential hygiene in public-sector systems.
Follow @technadu for sober, technically grounded cybersecurity reporting.
Source: https://www.inside-it.ch/datenleck-bei-der-rhaetischen-bahn-20260122
Thoughts and analysis welcome.
#InfoSec #DataBreach #TransportSecurity #CredentialSecurity #PublicInfrastructure #CyberRisk
-
A recent investigation into malicious Chrome extensions targeting enterprise HR and ERP platforms highlights a persistent challenge: browser extensions operating with elevated trust.
The campaign involved credential cookie exfiltration, session hijacking, and interference with administrative security controls - demonstrating how extensions can bypass traditional perimeter defenses.
This reinforces the need for stronger browser governance, extension allow-listing, and visibility within enterprise environments.
Follow @technadu for neutral, practitioner-focused cybersecurity reporting.
Thoughtful discussion encouraged.
#InfoSec #EnterpriseSecurity #BrowserHardening #IdentityThreats #CredentialSecurity #SaaSRisk #CyberDefense #SecurityAwareness
-
Recent law enforcement actions against suspected Black Basta affiliates highlight how modern ransomware groups operate.
Investigators say some members focused on credential recovery and access enablement, while leadership coordinated targeting, negotiations, and cryptocurrency payments. Authorities seized digital media and continue forensic analysis.Defensive implications:
• Credential theft remains a primary entry point
• Ransomware operations are modular and role-based
• Early-stage detection is critical
How are organizations adjusting controls to detect access misuse sooner?Source:https://therecord.media/police-raid-homes-of-alleged-black-basta-hackers
Engage with the discussion and follow TechNadu for objective InfoSec coverage.
#InfoSec #Ransomware #ThreatIntelligence #CredentialSecurity #IncidentResponse #CyberDefense #TechNadu
-
🚨 Collins Aerospace Breached Twice in One Week — Everest + Ransomware
Evidence confirms two distinct incidents:
– Everest data exfiltration (Sept 10–11): leveraged old credentials from a 2022 RedLine infection.
– Ransomware attack (Sept 19): separate event, caused system disruptions.Legacy credentials remain one of the most exploited weaknesses in enterprise networks.
💬 How does your team track and rotate long-term credentials? Comment below & follow TechNadu for real-time cyber intelligence.
#CyberSecurity #CollinsAerospace #Everest #Ransomware #RedLineStealer #InfoSec #CredentialSecurity #ThreatIntel #AviationSecurity #CyberDefense #ZeroTrust #TechNadu
-
AI MCP servers have a glaring security hole: long-lived, static credentials are putting data, code, and production systems at risk. https://jpmellojr.blogspot.com/2025/10/model-context-protocol-credential.html #AIsecurity #CredentialSecurity #MCP #APISecurity #SecretsManagement #Astrix
-
🐈⬛ Hashcat – A Practical Guide to Password Auditing
Hashcat is a powerful GPU-accelerated password recovery tool used by security professionals to test the strength of passwords in authorized environments.
🧠 What Hashcat is used for:
• Auditing password hashes (e.g., from Windows, Linux, web apps)
• Testing password policies and complexity
• Identifying weak or reused credentials in simulated lab setups🔐 Key Features:
• Supports a wide variety of hash types (MD5, SHA1, NTLM, bcrypt, etc.)
• Multiple attack modes: dictionary, brute-force, mask, hybrid, rule-based
• Highly customizable and efficient with GPU acceleration
• Works well for red teamers and defenders validating password hygiene🎯 When to use it:
• During penetration tests (with permission)
• In password policy assessments
• For internal security audits and training exercisesDisclaimer: This guide is for educational and ethical use only. Only audit password hashes on systems you own or have explicit authorization to test.
#Hashcat #CyberSecurity #PasswordAuditing #EthicalHacking #InfoSec #EducationOnly #RedTeamTools #CredentialSecurity #GPUCracking #SecurityAssessment
-
🐈⬛ Hashcat – A Practical Guide to Password Auditing
Hashcat is a powerful GPU-accelerated password recovery tool used by security professionals to test the strength of passwords in authorized environments.
🧠 What Hashcat is used for:
• Auditing password hashes (e.g., from Windows, Linux, web apps)
• Testing password policies and complexity
• Identifying weak or reused credentials in simulated lab setups🔐 Key Features:
• Supports a wide variety of hash types (MD5, SHA1, NTLM, bcrypt, etc.)
• Multiple attack modes: dictionary, brute-force, mask, hybrid, rule-based
• Highly customizable and efficient with GPU acceleration
• Works well for red teamers and defenders validating password hygiene🎯 When to use it:
• During penetration tests (with permission)
• In password policy assessments
• For internal security audits and training exercisesDisclaimer: This guide is for educational and ethical use only. Only audit password hashes on systems you own or have explicit authorization to test.
#Hashcat #CyberSecurity #PasswordAuditing #EthicalHacking #InfoSec #EducationOnly #RedTeamTools #CredentialSecurity #GPUCracking #SecurityAssessment