Passwords

Passwords | News, how-tos, features, reviews, and videos

Revoking the token didn't kill the backdoor

I reverse-engineered an implant that runs C2 via a real OneDrive account and can remotely replace every stolen credential. Revocation isn't containment.

By Yanky Wilson

Sep 21, 20267 mins

Access ControlAuthenticationPasswords

Microsoft nudges enterprise security closer to its passwordless future. But ‘123456’ will survive.

By John Leyden

Sep 1, 20266 mins

Access ControlAuthenticationPasswords

Revoking the token didn't kill the backdoor

Microsoft nudges enterprise security closer to its passwordless future. But ‘123456’ will survive.

Microsoft 365 users fall victim to one-in-a-million password spray attack

Hungarian government email passwords exposed ahead of election

LLM-generated passwords are indefensible. Your codebase may already prove it

Going fully passwordless in hybrid enterprise environments

Your passwordless future may never fully arrive

Defending digital identity from computer-using agents (CUAs)

Resources

Managing modern identity complexity and reducing executive risk

The new era of executive risk: Why identity security must be continuous

5 identity security questions CISOs must be ready to answer