How to Protect Your Organization From Password Complications

Johannes Ulrich: Many organizations are moving away from forcing their users to regularly change their passwords. But some compliance regimens that still require you do implement password rotation in your organization. 3CX, the VoiceOver IP company was compromised and is part of the compromised its customers received malicious software embedded into its VoiceOver IP client. A security company Asterix found an interesting vulnerability in the way Google used OAuth.