Businesses vulnerable with ‘antiquated’ logins
Businesses are leaving themselves open to hackers by using standard username and password logins, Symantec warns.
Most firms still use standard username and password logins, placing them at risk of attack from crafty hackers, a report has warned.
Furthermore, these "antiquated" authentication methods make matters complex for workers, requiring them to remember various passwords, the Symantec-sponsored Forrester research showed.
Almost 90 per cent of users are required by their employer to remember two or more passwords, the survey of hundreds of global businesses revealed.
Even when it comes to partner access, 67 per cent of companies were found to not use two-factor authentication to protect their corporate networks.
Over half of companies polled admitted to having suffered one data breach in the past year, yet many businesses still rely on old authentication.
"The IT landscape is changing so dramatically and so rapidly that one in four organisations are requiring users to remember six or more passwords to access corporate networks and applications and as this Forrester study shows, that approach to authentication is collapsing under its own weight," said Atri Chatterjee, vice president of User Authentication at Symantec.
"As enterprises continue to open up, strong authentication can help keep the bad guys out."
A number of recent cases have highlighted the dangers of solely relying on username and login authentication.
Gawker Media admitted last month that passwords were stolen in a hack on its user databases. It subsequently recommended users change their passwords for any Gawker websites.
-
Nissan employee data exposed in Oracle PeopleSoft zero-day attacksNews The car manufacturer has urged current and former employees to change banking passwords and remain vigilant for phishing emails
-
Why Apple is speeding up software patchingNews Apple is speeding up its software patching processes amid rising concerns that AI is helping hackers to spot and exploit flaws at a far quicker pace.
-
We need to do something about passwordsPasswords are a fundamental aspect of access security, but recent password leaks have undermined their ability to protect data
-
Dashlane lifts the lid on attack that saw hackers download encrypted user vaultsNews The company said it has now informed all affected customers, and taken action to shut down the operation
-
The NCSC says it’s time to switch to passkeysNews UK security organization calls for companies to step up and offer more secure ways to login
-
AI agents are creating new identity security risks: 1Password wants to solve thatNews The Unified Access system from 1Password will help enterprises manage AI agent access across different devices and users
-
Using AI to generate passwords is a terrible idea, experts warnNews Researchers have warned the use of AI-generated passwords puts users and businesses at risk
-
Researchers called on LastPass, Dashlane, and Bitwarden to up defenses after severe flaws put 60 million users at risk – here’s how each company respondedNews Analysts at ETH Zurich called for cryptographic standard improvements after a host of password managers were found lacking
-
Thousands of exposed civil servant passwords are up for grabs onlineNews While the password security failures are concerning, they pale in comparison to other nations
-
Gen Z has a cyber hygiene problemNews A new survey shows Gen Z is far less concerned about cybersecurity than older generations
