Specops analyses the latest ALIEN TXTBASE data leak and identifies 27M new compromised passwords. Understand the risks and protect your organization. Read More
Blog
Categories
Why Identity Security Is Essential for Achieving DORA Compliance
Most security incidents start with a single point of failure: a compromised identity. With 44.7% of breaches involving stolen credentials, securing the identity layer is now essential for meeting the requirements of the Digital Operational Resilience Act (DORA), in... Read More
Credential stuffing attacks: How they work & tips for prevention
Credential stuffing attacks are on the rise, and they’re not going away any time soon. As long as users continue to reuse passwords and attackers have easy access to breach data, the threat will persist. And with recent reports... Read More
Preparing for the UK’s New Cyber Security and Resilience Bill
The UK government introduced the Cyber Security and Resilience (Network and Information Systems) Bill on 12th November 2025. The Bill updates the UK’s NIS Regulations 2018 to broaden scope, strengthen reporting duties, and increase regulators’ enforcement powers. If you... Read More
800M credentials analyzed: Which breached holiday passwords made the naughty list?
With the holiday season rapidly approaching, we wanted to find out how many people previously used this time of year as inspiration for passwords that ended up breached. We analyzed 800 million compromised passwords and found the numbers tell... Read More
Active Directory secure by design: Building resilience from the ground up
Active Directory wasn’t built with today’s threat landscape in mind. When Microsoft released Active Directory with Windows 2000, the primary concerns were directory services functionality and network efficiency – not defending against sophisticated nation-state actors or ransomware groups. Yet... Read More
Not all MFA is equal: Why you need phishing and fatigue resistant MFA
Implementing MFA should really be a non-negotiable in 2025. But here’s what many organizations don’t realize: checking the MFA box doesn’t automatically make your organization secure. However, MFA isn’t infallible and the type of authentication factor you choose matters... Read More
Meeting NCSC CAF requirements: A healthcare provider’s password and MFA journey
Picture this: you’re leading IT security for a mid-sized NHS trust when notice arrives that you need to demonstrate alignment with the NCSC’s Cyber Assessment Framework (CAF). You know immediately where some gaps will show up – authentication controls.... Read More
YubiKey guide: What is a YubiKey and why should you use one?
Stolen credentials remain one of the most common entry points for attackers, according to the Verizon Data Breach Investigations Report. Phishing campaigns, credential stuffing, and other credential-based attacks continue to evolve, targeting both cloud and on-premises systems. To reduce... Read More
Investigating CJIS? Lock down password compliance with Specops
When we think about criminal justice and cybersecurity, the imagination isn’t immediately drawn to compliance. Meeting policy requirements isn’t as flashy or exciting as a hooded hacker using a laptop to defeat their foes. The realm of cybercrime is known... Read More