• About Us
  • Privacy & Policy
  • Terms Conditions
  • Contact Us
biztoplocation.space
  • Home
  • Tech Trends

    The best deals ahead of the October Big Deal Days sale and everything we know so far

    Google Maps will flag businesses with potentially fake reviews

    DoNotPay ‘robot lawyer’ fined $193K by the FTC for not being a lawyer

    Meta’s Orion holographic avatars will (eventually) be in VR too

    Google files EU antitrust complaint against Microsoft

    California’s ‘click to cancel’ subscription bill is signed into law

    Horizon Zero Dawn Remastered arrives October 31 on PS5 and PC

    Ghost of Yōtei is a Tsushima sequel coming to PS5 in 2025

    The Google Photos video editor is getting AI, because of course it is

  • AI News
    The Quantum Arms Race Isn’t Just About Tech, It’s About Who Controls the Narrative

    “πŸŒ€ The Quantum Arms Race: Who Holds the Key to Our Tech Future? πŸŒπŸ”‘”

    New Survey Finds Balancing AI’s Ease of Use with Trust is Top of Business Leaders Minds

    Navigating the AI Frontier: Balancing Trust and Usability for Business Success 🀝✨

    Benjamin Harvey, Ph.D., Founder & CEO of AI Squared – Interview Series

    Unlocking the Future of AI: Dr. Benjamin Harvey’s Vision with AI Squared πŸš€βœ¨

    How to Realize Value from a GenAI-Enabled Workforce

    Maximize Your Business Potential: The Game-Changing Power of GenAI πŸš€βœ¨

    How Does AI Use Impact Critical Thinking?

    Navigating the AI Revolution: Boosting Critical Thinking in a Tech-Driven World πŸ€–βœ¨

    From Evo 1 to Evo 2: How NVIDIA is Redefining Genomic Research and AI-Driven Biological Innovations

    Unlocking the Secrets of Life: How NVIDIA is Revolutionizing Genomic Research with AI πŸš€πŸŒŸ

    Jotform Review: The Best Form Builder or Just Overhyped?

    Unlocking the Truth: Is Jotform the Next Best Thing in Form Building? πŸ€”πŸš€βœ¨

    The Road to Better AI-Based Video Editing

    Unlock Your Creative Potential: Explore the Future of AI in Video Editing! πŸŽ₯βœ¨πŸš€

    Post-RAG Evolution: AI’s Journey from Information Retrieval to Real-Time Reasoning

    Unlocking AI’s Future: From Data Fetching to Real-Time Thinking πŸ€–βœ¨

  • Cyber Security
    Europol Dismantles $540 Million Cryptocurrency Fraud Network, Arrests Five Suspects

    Unmasking the $540 Million Crypto Scam: How Europol Took Down a Fraud Empire πŸš¨πŸ’°

    Critical Open VSX Registry Flaw Exposes Millions of Developers to Supply Chain Attacks

    🚨 Protect Your Code: What You Need to Know About the Open VSX Registry Flaw πŸ”’βœ¨

    nOAuth Vulnerability Still Affects 9% of Microsoft Entra SaaS Apps Two Years After Discovery

    Navigating the nOAuth Nightmare: Is Your Microsoft Entra App Safe? πŸš¨πŸ”’

    Pro-Iranian Hacktivist Group Leaks Personal Records from the 2024 Saudi Games

    πŸ“‰ Hackers Strike: Unraveling the Shocking 2024 Saudi Games Data Breach πŸŒπŸ”“

    Beware the Hidden Risk in Your Entra Environment

    Shielding Your Entra: Unmasking Hidden Threats & Securing Your Digital Kingdom! πŸ›‘οΈπŸŒβœ¨

    Hackers Target Over 70 Microsoft Exchange Servers to Steal Credentials via Keyloggers

    🚨 Don’t Let Hackers Steal Your Secrets: Guard Your Microsoft Exchange Servers Now! πŸ›‘οΈπŸ”‘

    China-linked Salt Typhoon Exploits Critical Cisco Vulnerability to Target Canadian Telecom

    Caught in the Crossfire: How Salt Typhoon is Targeting Canadian Telecoms through Cisco Vulnerabilities πŸŒ©οΈπŸ“žπŸ”’

    Google Adds Multi-Layered Defenses to Secure GenAI from Prompt Injection Attacks

    Secure Your AI Future: How Google is Tackling Prompt Injection Attacks πŸš€πŸ”’

    200+ Trojanized GitHub Repositories Found in Campaign Targeting Gamers and Developers

    🚨 Warning for Gamers & Developers: Don’t Fall for Trojanized Repositories! πŸ›‘οΈπŸ’»

  • Apps News
    The Quantum Arms Race Isn’t Just About Tech, It’s About Who Controls the Narrative

    “πŸŒ€ The Quantum Arms Race: Who Holds the Key to Our Tech Future? πŸŒπŸ”‘”

    New Survey Finds Balancing AI’s Ease of Use with Trust is Top of Business Leaders Minds

    Navigating the AI Frontier: Balancing Trust and Usability for Business Success 🀝✨

    Benjamin Harvey, Ph.D., Founder & CEO of AI Squared – Interview Series

    Unlocking the Future of AI: Dr. Benjamin Harvey’s Vision with AI Squared πŸš€βœ¨

    How to Realize Value from a GenAI-Enabled Workforce

    Maximize Your Business Potential: The Game-Changing Power of GenAI πŸš€βœ¨

    How Does AI Use Impact Critical Thinking?

    Navigating the AI Revolution: Boosting Critical Thinking in a Tech-Driven World πŸ€–βœ¨

    From Evo 1 to Evo 2: How NVIDIA is Redefining Genomic Research and AI-Driven Biological Innovations

    Unlocking the Secrets of Life: How NVIDIA is Revolutionizing Genomic Research with AI πŸš€πŸŒŸ

    Jotform Review: The Best Form Builder or Just Overhyped?

    Unlocking the Truth: Is Jotform the Next Best Thing in Form Building? πŸ€”πŸš€βœ¨

    The Road to Better AI-Based Video Editing

    Unlock Your Creative Potential: Explore the Future of AI in Video Editing! πŸŽ₯βœ¨πŸš€

    Post-RAG Evolution: AI’s Journey from Information Retrieval to Real-Time Reasoning

    Unlocking AI’s Future: From Data Fetching to Real-Time Thinking πŸ€–βœ¨

  • Events

    Does Cannabis Belong at Business Events?

    Rising Event Costs to Challenge 2025 Budgets

    Event Tech and the Future of In-Person Networking

    Dubai To Invest $2.7 Billion in What Will Become the Largest Exhibition Venue in the Middle East

    The Old Playbook Will Not Work for Today’s Corporate Events

    Why Actual Face Time Beats Screen Time for Gen Z

    Breathe New Life Into Meetings in Whistler

    Oak View Group and OCESA Team Up to Offer Hospitality at Four Mexico City Venues

    Time to Chill: Planners’ Post-Meeting Rituals

No Result
View All Result
  • Home
  • Tech Trends

    The best deals ahead of the October Big Deal Days sale and everything we know so far

    Google Maps will flag businesses with potentially fake reviews

    DoNotPay ‘robot lawyer’ fined $193K by the FTC for not being a lawyer

    Meta’s Orion holographic avatars will (eventually) be in VR too

    Google files EU antitrust complaint against Microsoft

    California’s ‘click to cancel’ subscription bill is signed into law

    Horizon Zero Dawn Remastered arrives October 31 on PS5 and PC

    Ghost of Yōtei is a Tsushima sequel coming to PS5 in 2025

    The Google Photos video editor is getting AI, because of course it is

  • AI News
    The Quantum Arms Race Isn’t Just About Tech, It’s About Who Controls the Narrative

    “πŸŒ€ The Quantum Arms Race: Who Holds the Key to Our Tech Future? πŸŒπŸ”‘”

    New Survey Finds Balancing AI’s Ease of Use with Trust is Top of Business Leaders Minds

    Navigating the AI Frontier: Balancing Trust and Usability for Business Success 🀝✨

    Benjamin Harvey, Ph.D., Founder & CEO of AI Squared – Interview Series

    Unlocking the Future of AI: Dr. Benjamin Harvey’s Vision with AI Squared πŸš€βœ¨

    How to Realize Value from a GenAI-Enabled Workforce

    Maximize Your Business Potential: The Game-Changing Power of GenAI πŸš€βœ¨

    How Does AI Use Impact Critical Thinking?

    Navigating the AI Revolution: Boosting Critical Thinking in a Tech-Driven World πŸ€–βœ¨

    From Evo 1 to Evo 2: How NVIDIA is Redefining Genomic Research and AI-Driven Biological Innovations

    Unlocking the Secrets of Life: How NVIDIA is Revolutionizing Genomic Research with AI πŸš€πŸŒŸ

    Jotform Review: The Best Form Builder or Just Overhyped?

    Unlocking the Truth: Is Jotform the Next Best Thing in Form Building? πŸ€”πŸš€βœ¨

    The Road to Better AI-Based Video Editing

    Unlock Your Creative Potential: Explore the Future of AI in Video Editing! πŸŽ₯βœ¨πŸš€

    Post-RAG Evolution: AI’s Journey from Information Retrieval to Real-Time Reasoning

    Unlocking AI’s Future: From Data Fetching to Real-Time Thinking πŸ€–βœ¨

  • Cyber Security
    Europol Dismantles $540 Million Cryptocurrency Fraud Network, Arrests Five Suspects

    Unmasking the $540 Million Crypto Scam: How Europol Took Down a Fraud Empire πŸš¨πŸ’°

    Critical Open VSX Registry Flaw Exposes Millions of Developers to Supply Chain Attacks

    🚨 Protect Your Code: What You Need to Know About the Open VSX Registry Flaw πŸ”’βœ¨

    nOAuth Vulnerability Still Affects 9% of Microsoft Entra SaaS Apps Two Years After Discovery

    Navigating the nOAuth Nightmare: Is Your Microsoft Entra App Safe? πŸš¨πŸ”’

    Pro-Iranian Hacktivist Group Leaks Personal Records from the 2024 Saudi Games

    πŸ“‰ Hackers Strike: Unraveling the Shocking 2024 Saudi Games Data Breach πŸŒπŸ”“

    Beware the Hidden Risk in Your Entra Environment

    Shielding Your Entra: Unmasking Hidden Threats & Securing Your Digital Kingdom! πŸ›‘οΈπŸŒβœ¨

    Hackers Target Over 70 Microsoft Exchange Servers to Steal Credentials via Keyloggers

    🚨 Don’t Let Hackers Steal Your Secrets: Guard Your Microsoft Exchange Servers Now! πŸ›‘οΈπŸ”‘

    China-linked Salt Typhoon Exploits Critical Cisco Vulnerability to Target Canadian Telecom

    Caught in the Crossfire: How Salt Typhoon is Targeting Canadian Telecoms through Cisco Vulnerabilities πŸŒ©οΈπŸ“žπŸ”’

    Google Adds Multi-Layered Defenses to Secure GenAI from Prompt Injection Attacks

    Secure Your AI Future: How Google is Tackling Prompt Injection Attacks πŸš€πŸ”’

    200+ Trojanized GitHub Repositories Found in Campaign Targeting Gamers and Developers

    🚨 Warning for Gamers & Developers: Don’t Fall for Trojanized Repositories! πŸ›‘οΈπŸ’»

  • Apps News
    The Quantum Arms Race Isn’t Just About Tech, It’s About Who Controls the Narrative

    “πŸŒ€ The Quantum Arms Race: Who Holds the Key to Our Tech Future? πŸŒπŸ”‘”

    New Survey Finds Balancing AI’s Ease of Use with Trust is Top of Business Leaders Minds

    Navigating the AI Frontier: Balancing Trust and Usability for Business Success 🀝✨

    Benjamin Harvey, Ph.D., Founder & CEO of AI Squared – Interview Series

    Unlocking the Future of AI: Dr. Benjamin Harvey’s Vision with AI Squared πŸš€βœ¨

    How to Realize Value from a GenAI-Enabled Workforce

    Maximize Your Business Potential: The Game-Changing Power of GenAI πŸš€βœ¨

    How Does AI Use Impact Critical Thinking?

    Navigating the AI Revolution: Boosting Critical Thinking in a Tech-Driven World πŸ€–βœ¨

    From Evo 1 to Evo 2: How NVIDIA is Redefining Genomic Research and AI-Driven Biological Innovations

    Unlocking the Secrets of Life: How NVIDIA is Revolutionizing Genomic Research with AI πŸš€πŸŒŸ

    Jotform Review: The Best Form Builder or Just Overhyped?

    Unlocking the Truth: Is Jotform the Next Best Thing in Form Building? πŸ€”πŸš€βœ¨

    The Road to Better AI-Based Video Editing

    Unlock Your Creative Potential: Explore the Future of AI in Video Editing! πŸŽ₯βœ¨πŸš€

    Post-RAG Evolution: AI’s Journey from Information Retrieval to Real-Time Reasoning

    Unlocking AI’s Future: From Data Fetching to Real-Time Thinking πŸ€–βœ¨

  • Events

    Does Cannabis Belong at Business Events?

    Rising Event Costs to Challenge 2025 Budgets

    Event Tech and the Future of In-Person Networking

    Dubai To Invest $2.7 Billion in What Will Become the Largest Exhibition Venue in the Middle East

    The Old Playbook Will Not Work for Today’s Corporate Events

    Why Actual Face Time Beats Screen Time for Gen Z

    Breathe New Life Into Meetings in Whistler

    Oak View Group and OCESA Team Up to Offer Hospitality at Four Mexico City Venues

    Time to Chill: Planners’ Post-Meeting Rituals

No Result
View All Result
biztoplocation.space
No Result
View All Result
Home Security

Why ‘Never Expire’ Passwords Can Be a Risky Decision

admin by admin
September 23, 2024
in Security
0
0
SHARES
0
VIEWS
Share on FacebookShare on Twitter

[ad_1]

ξ ‚Sep 23, 2024ξ „The Hacker NewsPassword Management / Data Breach

Password Management

Password resets can be frustrating for end users. Nobody likes being interrupted by the ‘time to change your password’ notification – and they like it even less when the new passwords they create are rejected by their organization’s password policy. IT teams share the pain, with resetting passwords via service desk tickets and support calls being an everyday burden. Despite this, it’s commonly accepted that all passwords should expire after a set period of time.

Why is this the case? Do you need password expiries at all? Explore the reason expiries exist and why setting passwords to ‘never expire’ might save some headaches, but not be the best idea for cybersecurity.

Why do we have password expiries?

The traditional 90-day password reset policy stems from the need to protect against brute-force attacks. Organizations typically store passwords as hashes, which are scrambled versions of the actual passwords created using cryptographic hash functions (CHFs). When a user enters their password, it’s hashed and compared to the stored hash. Attackers attempting to crack these passwords must guess the correct one by running potential passwords through the same hashing algorithm and comparing the results. The process can further be complicated for attackers by techniques like salting, where random strings are added to passwords before hashing.

Brute-force attacks depend on several factors, including the computational power available to the attacker and the strength of the password. The 90-day reset period was considered a balanced approach to outpace brute-force attacks while not burdening users with too frequent changes. Advances in technology, however, have reduced the time required to crack passwords, prompting a re-evaluation of this policy. Despite this, the 90-day expiry remains a recommendation in many compliance standards, including PCI.

Why have some organizations got rid of expiries?

One of the main arguments against regular password expiry is that it can lead to the reuse of weak passwords. Users often make slight changes to their existing passwords, such as changing ‘Password1!’ to ‘Password2!’. This practice undermines the security benefits of password changes. The real issue here though is not the act of resetting passwords but rather the organization’s policy that allows weak passwords in the first place.

The bigger reason organizations have opted for ‘never expire’ passwords is reducing IT and service desk burden. The cost and burden of password resets on IT help desks are significant. Gartner estimates that 20-50% of IT help desk calls are related to password resets, with each reset costing around $70 in labor according to Forrester. This adds up, especially when users frequently forget their passwords after being forced to create new ones.

Some organizations may therefore be tempted to force end users into creating one very strong password and then setting the passwords to ‘never expire’ in order to cut down on IT burden and reset costs.

What are the risks with ‘never expire’ passwords?

Having a strong password and never changing it might give someone a false sense of security. A strong password isn’t immune to threats; it can be vulnerable to phishing schemes, data breaches, or other types of cyber incidents without the user realizing it. The Specops Breached Password Report found 83% of passwords that were compromised met the regulatory standards for length and complexity.

An organization might have a strong password policy where every end user is forced to create a strong password that’s resistant to brute force attacks. But what happens if the employee decides to reuse their password for their Facebook, Netflix, and all other personal applications too? The risk of the password being compromised increases a lot, regardless of the internal security measures the organization has in place. A survey by LastPass found 91% of end users understood the risk of password reuse – but 59% did it anyway.

Another risk with ‘never expire’ passwords is that an attacker could use a set of compromised credentials for a long period of time. The Ponemon Institute found that it typically takes an organization about 207 days to identify a breach. While mandating password expiration could be beneficial here, it’s likely that an attacker would have already achieved their objectives by the time the password expires. Consequently, NIST and other guidelines advise organizations to only set passwords to never expire if they have mechanisms to identify compromised accounts.

How to detect compromised passwords

Organizations must adopt a comprehensive password strategy that goes beyond regular expiry. This includes guiding users to create strong passphrases of at least 15 characters. Such a policy can significantly reduce vulnerability to brute-force attacks. Encouraging end users to create longer passwords can also be achieved through length-based aging, where longer, stronger passwords are allowed to be used for extended periods before expiring. This approach eliminates the need for a one-size-fits-all expiry time, provided users adhere to the organization’s password policy.

Password Management
Picture show with building stronger passwords and length-based ageing

However, even strong passwords can be compromised and there need to be measures in place to detect this. As once compromised, the cracking time for a password in the bottom right of the above table turns to ‘instantly.’ Organizations need a joined-up strategy to make sure they are covering themselves against both weak and compromised passwords.

If you’re interested in managing all of the above in an automated way from a simple-to-use interface within Active Directory, Specops Password Policy could be a valuable tool in your cybersecurity armory. Through its Breached Password Protection service, Specops Password Policy can continuously check and block the use of more than 4 billion unique known compromised passwords. See for yourself with a live demo.

Found this article interesting? This article is a contributed piece from one of our valued partners. Follow us on Twitter ο‚™ and LinkedIn to read more exclusive content we post.



[ad_2]

Source link

Previous Post

Navigating the Forks in the Road: Are Bitcoin Forks Turning Points for Innovation or Chaos? πŸ”„πŸ’‘

Next Post

A The Lord of the Rings Game is now due out in March 2025

admin

admin

Next Post

A The Lord of the Rings Game is now due out in March 2025

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Stay Connected test

  • 23.9k Followers
  • 99 Subscribers
  • Trending
  • Comments
  • Latest
CERT-UA Warns: Dark Crystal RAT Targets Ukrainian Defense via Malicious Signal Messages

Cybersecurity Under Siege: The Dark Crystal RAT Targets Ukraine’s Defense! πŸš¨πŸ”’

March 20, 2025
Voyantis Secures $41M to Revolutionize AI-Driven Growth Strategies

Unlocking Growth: How Voyantis’ $41M AI Revolution is Changing the Game for Businesses πŸŒŸπŸ’Ό

February 14, 2025
Explore Fully Operational Cockpits and Aircraft with Aerofly FS Global Mobile Flight Simulator

Soar Beyond Limits: Experience the Ultimate Flight Adventure with Aerofly FS Global! ✈️🌍✨

November 22, 2024

Oak View Group and OCESA Team Up to Offer Hospitality at Four Mexico City Venues

September 24, 2024

Nth Degree Targets Strategic Acquisitions with New Backing from Shamrock Capital

0

5 Best Classic App Store Games

0

Apple Vision Pro Vulnerability Exposed Virtual Keyboard Inputs to Attackers

0

The best iPad accessories for 2024

0
5 Best Classic App Store Games

“✨ Dive into Nostalgia: 5 Must-Play App Store Classics That Bring Joy! πŸŽ‰”

July 14, 2025
A World of Wonder and Peril Awaits in the Underwater Adventure Subnautica

🌊 Dive Deep into Subnautica: Uncover Secrets Beneath the Waves! πŸ¦‘βœ¨

July 10, 2025
See Your Calendar in a New Way With Timescape

Unlock Your Time Management Potential with Timescape: The Future of Calendars Awaits! πŸš€πŸ“…βœ¨

July 9, 2025
Best New Apps of June 2025

πŸš€ Unleash Your Potential: The Must-Have Apps of June 2025! πŸ“±βœ¨

July 7, 2025

Recent News

5 Best Classic App Store Games

“✨ Dive into Nostalgia: 5 Must-Play App Store Classics That Bring Joy! πŸŽ‰”

July 14, 2025
A World of Wonder and Peril Awaits in the Underwater Adventure Subnautica

🌊 Dive Deep into Subnautica: Uncover Secrets Beneath the Waves! πŸ¦‘βœ¨

July 10, 2025
See Your Calendar in a New Way With Timescape

Unlock Your Time Management Potential with Timescape: The Future of Calendars Awaits! πŸš€πŸ“…βœ¨

July 9, 2025
Best New Apps of June 2025

πŸš€ Unleash Your Potential: The Must-Have Apps of June 2025! πŸ“±βœ¨

July 7, 2025

Biz Top News

At Biz Top News, we provide the latest updates and insights on technology, from AI and cybersecurity to apps and cryptocurrency. Stay informed with our expert analysis and breaking news.

Browse by Category

  • AI News
  • Apps
  • Crypto
  • Events
  • Security
  • Tech Trends
  • Uncategorized

About

  • About Us
  • Privacy & Policy
  • Terms Conditions
  • Contact Us

    Β© 2025 Biztoplocation - All rights reserved.

    No Result
    View All Result

    Β© 2025 Biztoplocation - All rights reserved.