Purple Fox is malware that was first discovered in 2018 but has seen a recent rise in proliferation as hackers take advantage of a new attack method: weak passwords used over the SMB protocol. SMB (Server Message Block) is... Read More
Blog
German Federal Office for Information Security password guidance
The German Federal Office for Information Security (Bundesamt für Sicherheit in der Informationstechnik, abbreviated as BSI) is an agency responsible for information security for the German federal government. The BSI is also the central certification body for IT systems.... Read More
CNIL password guidance
Data privacy has become a priority for global businesses due to sweeping regulations such as the General Data Protection Regulation (GDPR). At the same time, other regulatory bodies continue to enforce local data privacy laws. In France, for example,... Read More
Using Major League Baseball team names as passwords is a homerun for hackers
The Cincinnati Reds, America’s oldest baseball team, may have one of Major League Baseball’s (MLB) worst pre-season odds to win the World Series, but the team sits alone in first place on Specops’ breached password list. This is according... Read More
Programming your own password filter .dll
Organizations can increase the security of Active Directory passwords by filtering specific passwords from being used in their environment. Password filters help bolster the security protections of Active Directory Password Policy settings by ensuring that end-users cannot use passwords... Read More
Jay-Z or Cher? Our latest password data shows which artists are most popular in leaked passwords
Specops Software released today the latest update to its Breached Password Protection list as well as the latest analysis of password data. “This password data release is a fun one that continues to highlight how we humans choose our... Read More
Specops supports Symantec VIP to secure password resets
Specops Software released an update to its Specops Authentication platform today. The platform secures password resets, password changes, and encryption key recovery with multi-factor authentication (MFA) that supports various third-party MFA options including Symantec VIP. The updated version allows... Read More
How to evaluate breached password detection services
Keeping tabs on breached passwords is a must for those embroiled in the IT security battle. According to the 2020 Data Breach Investigations Report, 80% of data breaches in 2020 stemmed from stolen or brute-forced credentials. The stakes are... Read More
NIST Password Reset Guidelines
Passwords are necessary for authentication to different types of technology systems used in businesses today. Yet, they are a dangerous form of information from a security perspective. To strengthen password security, organizations want to take note of password best... Read More
Impact of running Specops Password Policy on Active Directory
We are often asked about the technical impact of using our solutions on Active Directory, and other services. In this blog post, we will look at the impact of Specops Password Policy and Breached Password Protection. See part 1... Read More