Sponsored: Push Security on its new stolen credentials detection feature
Dec 1, 2024
auto_awesome
Jacques Louw, co-founder and chief product officer at Push Security, dives into the intricacies of credential theft and the evolving landscape of phishing attacks. He discusses their new stolen credentials detection feature, highlighting the challenges of multi-factor authentication (MFA) and the innovative 'MFA guardrails' designed to simplify user experience. Louw sheds light on advanced detection techniques based on user behavior, and the critical need for enhanced identity security amidst rising cyber threats.
The development of tools that detect user behavior rather than specific phishing kits is crucial for mitigating identity-based attacks like credential theft.
Monitoring password reuse across platforms helps organizations proactively enforce unique passwords, significantly reducing the risk of successful phishing attacks.
Deep dives
Identity-Based Threat Detection
Identity-based attacks, such as credential theft and phishing, are prevalent threats in today’s cybersecurity landscape. A significant advancement in addressing these threats is the development of tools that can detect and stop such attacks within web browsers. For instance, reverse proxy phishing kits, which can bypass multi-factor authentication, have evolved, prompting security solutions to focus on detecting user behavior rather than specific phishing kits. By analyzing patterns such as attempted logins on suspicious domains, these tools can effectively identify and mitigate phishing attempts before they cause harm.
Monitoring Password Reuse
Monitoring password reuse across various platforms is a critical feature for enhancing identity security. Many users unknowingly use the same credentials across multiple sites, which can lead to significant breaches when one service is compromised. Implementing monitoring solutions allows organizations to identify instances of password reuse and enforce password resets proactively. This preventive measure greatly reduces the risk of successful phishing attacks, as users are guided to create unique, secure passwords for each service they access.
The Role of Multi-Factor Authentication (MFA)
Multi-factor authentication (MFA) is recognized as an essential security control for protecting user identities, particularly for core platforms like Microsoft and Okta. Despite its effectiveness, there is often user pushback against implementing MFA due to complexities and usability concerns. Many organizations underestimate the diversity of applications in use and the absence of MFA options on them, leading to potential security gaps. Thus, having visibility into existing applications and adopting features like MFA guardrails can help enforce MFA usage even where it is not natively supported, bolstering overall security.
In this Risky Business News sponsor interview, Catalin Cimpanu talks with Jacques Louw, co-founder and chief product officer at Push Security, on the company’s new stolen credentials detection feature, how AitM phishing can be spotted in the browser, and how Push deals with customers needing help with MFA.
Get the Snipd podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered podcast player
Listen to all your favourite podcasts with AI-powered features
Discover highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share & Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered podcast player
Listen to all your favourite podcasts with AI-powered features
Discover highlights
Listen to the best highlights from the podcasts you love and dive into the full episode