Passwords: Strength and Longevity vs. Uniqueness

Bishop Fox's Christie Terrill revisits password security after Heartbleed: the OpenSSL bug leaked server memory holding keys and credentials, and leading practices limit the damage of such exposures.

Drawing on 300,000 anonymized pentest findings, NetSPI reviews six spooky common vulnerabilities of 2023, noting simple tactics like the MGM Resorts vishing attack still cause major breaches.

For Cybersecurity Awareness Month's 20th anniversary, NetSPI shares four tactics for defending against social engineering, plus education resources and a Monster Mash video on phishing prevention.

Read about our favorite moments from SecureWorld Boston 2022, featuring conversations on security awareness training, cloud security, cybersecurity crisis management, and more.

A CISO shares tips for reducing business-security friction, including running realistic phishing simulations that fooled 70% of staff and learning from them without eroding employee trust.

A security awareness leader argues for lean, mandatory cybersecurity training, no-shame reporting culture, and lessons on communication and adaptability drawn from cycling from Seattle to Singapore.