It’s no secret that email is one of the most common ways that attackers gain a foothold on an organization’s network. Targeted spear-phishing campaigns use carefully designed messages that combine a sophisticated look and feel with appealing content to trick users into clicking on malicious messages. Awareness campaigns have their place, but the practical reality…

What’s the current state of multifactor authentication in your organization? If you’re like many of my customers, you might think that MFA is old hat — a problem solved years ago that now just requires a little routine maintenance. If that sounds familiar, it’s probably time for you to re-evaluate the role that MFA plays…

In Part 1 and Part 2 of my blog series, I shared some insights into how attackers continue to exploit the weaknesses of WPA and the tools and techniques they are using to gain access to poorly secured networks. In the last post of the series, I will offer some suggestions for how organizations can…

In my first blog post on securing against Wi-Fi Protected Access vulnerabilities, I talked about the fact that attacks are still being developed to take advantage of weaknesses found in WPA/WPA2, which are known and have been around for a while. This post continues that discussion, getting into how exactly most attacks are carried out…

In early August this year, the folks behind the Hashcat password cracking tool posted a thread on a new attack against Wi-Fi Protected Access (WPA/WPA2) using the Pairwise Master Key Identification technique. The attack differs from the traditional WPA/WPA2 attack vector in that it does not require the capture of a full Extensible Authentication Protocol…

The intense interest in cybersecurity among IT professionals reflects its growing importance to just about every organization in every industry. I talked with many people who attended the CDW SummIT on Managing Risk in Las Vegas last month, and I was really impressed with the number of attendees and their level of engagement. One of…