Skip to main content
To Customer Support To Customer Support

Security Expert Perspectives

Experts share their insights on protecting against cyber threats and staying ahead of evolving security risks.

  • 11 Topics
  • 154 Replies
Blog

2025 Cybersecurity Predictions: Emerging trends and the threats ahead o...

  • 5
  • 1
Blog

Understanding Brute Force Attacks: The Persistent Threat in Cybersecuri...

  • 4
  • 4
Blog

Tax Season Alert: Common scams and cracked software

  • 4
  • 5
11 Topics
TylerM
Administrator
TylerMSr. Security Analyst & Community Manager
published in Security Expert Perspectives
Passkeys: The Future of Secure and Seamless Authentication

What Are Passkeys? You may have seen the term "passkeys" appearing more frequently in tech news, app updates, and security discussions. Major companies like Apple, Google, and Microsoft are rolling out passkeys as a replacement for passwords, promising both enhanced security and a smoother user experience. But what exactly are passkeys, and why are they considered the future of authentication?With Password Day coming up this Saturday, it's the perfect time to discuss the future of authentication. Passwords have long been the foundation of online security, but they come with significant downsides: they can be stolen, guessed, or reused across multiple sites. Enter passkeys, a next-generation authentication technology designed to replace passwords entirely with a more secure and user-friendly alternative.Passkeys leverage public-key cryptography to authenticate users without requiring them to remember or type in a password. Instead, passkeys are stored on a trusted device (like your phon

473
ProTruckDriver
Moderator
TylerM
Administrator
TylerMSr. Security Analyst & Community Manager
published in Security Expert Perspectives
New Year, New Threats: 2025 Strategies for Smart Home and IoT DefenseBlog

Consumers in 2025 will face a threat landscape that blends sophisticated technology with highly personalized tactics. Your home, devices, and personal information will be prize targets for adversaries who deploy advanced AI and social engineering techniques.  Predictions for Consumers in 2025 1. Ransomware Evolves into ‘Home Hostage’ ScenariosAs more consumers rely on smart homes, threat actors will try holding connected devices, stored data or the entire home network “hostage.” While traditional ransomware focuses on data encryption, future attacks might threaten to disable critical IoT systems or leak sensitive personal content unless a ransom is paid. 2. Hyper-Targeted Phishing Through AI AvatarsConsumers will face a new era of phishing attacks delivered via realistic AI-generated voices or deepfake videos purporting to be friends, family members, or trusted brands. Traditional “spoofed” emails will give way to convincing real-time communications that erode the line between legitima

293
Jasper_The_Rasper
Moderator
TylerM
Administrator
TylerMSr. Security Analyst & Community Manager
published in Security Expert Perspectives
2025 Cybersecurity Predictions: Emerging trends and the threats ahead of usBlog

As 2025 is in full swing, cybersecurity continues to evolve with new threats and technologies. Drawing from recent trends, expert analyses, and my previous insights in "The Nastiest Malware 2024," here's a look at what small to medium-sized businesses (SMBs) can expect in the cybersecurity landscape, particularly concerning ransomware, phishing, AI, and other typical cyber threats.  Predictions 1. Ransomware’s attacks on SMB will grow to be a larger share of the pieRansomware operators, who’ve historically had a focus on large enterprises, are expected to increasingly pivot toward SMBs by 2025. These “breadth attacks” rely on automated toolsets that can rapidly compromise a broader pool of smaller targets. SMBs, often with limited cybersecurity budgets and reactive security measures, will be viewed as low-hanging fruit. 2. AI-Augmented Threat Campaigns Against SMB ToolingAI-powered malware and phishing kits will become more cost-effective for adversaries, enabling them to generate cust

661
TripleHelix
Moderator
TylerM
Administrator
TylerMSr. Security Analyst & Community Manager
published in Security Expert Perspectives
Understanding Brute Force Attacks: The Persistent Threat in CybersecurityBlog

Brute force attacks stand as a testament to the idea that persistence often pays off - unfortunately, in this context, it’s for  bad actors. This blog dives into the mechanics of brute force attacks, unraveling their methodology and focusing on their application. Whether its Remote Desktop Protocol (RDP), or direct finance theft, brute force attacks are a prime tactic in the current cybersecurity landscape. What is a Brute Force Attack?A brute force attack is a cyber attack method where an attacker attempts to gain unauthorized access to a system or data by systematically trying every possible combination of passwords or keys. This method relies on the sheer power of repetition and the computational capacity to try thousands, if not millions, of combinations in a short span of time. Think of it as trying every key on a keyring until finding the one that unlocks a door.Types of Brute Force AttacksSimple brute force attacks: This basic approach involves trying all possible combinations o

894
russell.harris
Popular Voice
TylerM
Administrator
TylerMSr. Security Analyst & Community Manager
published in Security Expert Perspectives
Tax Season Alert: Common scams and cracked softwareBlog

OpenText is committed to providing you with the latest intelligence and tips to safeguard your digital life, especially during high-risk periods like tax season. Our threat analysts are constantly monitor the ebb and flow of various threats. One trend that has recently caught our attention is the notable spike in malware-infected cracked software, particularly as we enter tax season. This post aims to shed light on the dangers of using cracked software, share best practices for a secure tax season, and highlight our latest intelligence on the surge in cracked tax software threats. The Hidden Cost of Cracked Software Cracked software, often touted as a cost-free way to access games and expensive software, carries a significant risk far beyond legal and ethical concerns. These unauthorized versions are frequently loaded with malware, from trojans and keyloggers to ransomware. The allure of free access blinds users to the dangers, turning their devices into gateways for cybercriminals to

3525
TylerM
Administrator
TylerM
Administrator
TylerMSr. Security Analyst & Community Manager
published in Security Expert Perspectives
AI's Challenge to Biometric Security: Implications of new iOS malware GoldPickaxeBlog

In today's digital age, Artificial Intelligence (AI) is advancing at an astonishing pace, posing new challenges to the integrity of biometric security. The advent of AI-driven tools, capable of crafting deepfakes, exposes a significant flaw in biometric authentication systems: unlike passwords, biometric identifiers cannot simply be reset once they are compromised.The emergence of the "GoldPickaxe" malware, attributed to a group fluent in Chinese, serves as a vivid illustration of AI's potential to circumvent biometric protections. By deceiving individuals into submitting facial scans under the pretense of a legitimate service, the perpetrators utilize deepfake technology to gain unauthorized access to the victims' financial accounts. This scenario underscores the urgent need for industries, particularly banking, to rapidly adjust to these evolving cybersecurity threats. For a detailed technical analysis and to learn more about the indicators of compromise associated with GoldPickaxe,

863
ProTruckDriver
Moderator
TylerM
Administrator
TylerMSr. Security Analyst & Community Manager
published in Security Expert Perspectives
Navigating the Web of Romance Scams: A Guide for Businesses and ConsumersBlog

In the digital age, the quest for love has moved online, but so have the fraudsters, with romance scams reaching record highs. These scams don't just harm individuals financially and emotionally; they can also pose significant risks to businesses. Let's explore how these scams work, their impact, and how both businesses and consumers can protect themselves. Understanding Romance ScamsRomance scams involve fraudsters creating fake profiles on dating sites, social media platforms, or apps to establish relationships with victims, gain their trust, and eventually, scam them out of money. In 2022, nearly 70,000 people reported such scams, with losses totaling a staggering $1.3 billion. The median loss per victim was around $4,400, highlighting the severe impact on individuals​​. Key Trends to WatchThe reported losses to romance scams were up nearly 80% year over year, showing a rapid increase in both the frequency and effectiveness of these scams​​. This trend underscores the evolving threa

643
russell.harris
Popular Voice
TylerM
Administrator
TylerMSr. Security Analyst & Community Manager
published in Security Expert Perspectives
IoT in the Cybersecurity Landscape: Convenience vs SecurityBlog

The Internet of Things (IoT) has revolutionized how we interact with our surroundings, making life more convenient and efficient. IoT devices connect everyday objects to the internet, allowing us to control our homes, monitor our health, and even track our belongings. However, this interconnectivity comes at a cost: the exponential growth of IoT devices has led to increased cybersecurity risks. In this article, we will discuss trends in IoT and their implications on the cybersecurity landscape, and ponder whether the convenience provided by IoT is worth the security trade-offs. The concept of IoT can be traced back to the 1980s, but it wasn't until the early 2000s that IoT devices began to gain widespread adoption. In the early days of IoT, security was often an afterthought and the focus was on getting a working product out the door. However, as IoT devices have proliferated, the risks associated with their widespread use have become more apparent.I was at a Defcon event about a decad

62361
Z
New Member
TylerM
Administrator
TylerMSr. Security Analyst & Community Manager
published in Security Expert Perspectives
Artificial intelligence and machine learning in cybersecurityBlog

Artificial intelligence (AI) and machine learning (ML) are going to revolutionize the field of cybersecurity. These technologies can be used to improve the detection and prevention of cyber threats, making it easier for organizations to protect their networks and data. However, as with any new technology, there are also potential risks and challenges that must be considered.One of the biggest benefits of AI and ML in cybersecurity is their ability to automatically detect and respond to cyber threats. These technologies can be used to analyze large amounts of data, such as network traffic logs and characteristics of files to identify patterns and anomalies that may indicate a cyber attack or malicious nature. They can also be used to automatically respond to threats, such as by shutting down a compromised system or blocking a malicious IP address. Additionally, the benefits of AI and ML in cybersecurity is their ability to improve the efficiency and effectiveness of incident response. T

56520
TylerM
Administrator
K
khumphreyRetired Webrooter
published in Security Expert Perspectives
Data Privacy Week 2023Blog

Welcome to Data Privacy Week! This is an annual campaign with the purpose of spreading awareness about online privacy and educating citizens on how to manage their personal information and keep it secure. Today we will discuss the importance of using cold storage password managers as well as the impact of the General Data Protection Regulation (GDPR) on data privacy. Get ready to learn about personal data security, creating and storing strong passwords as well as the negative side-effects of rising GDPR fines. Password Manager Data Breaches At the end of 2022, Norton LifeLock suffered a data breach. Symantec reports that their systems were not directly compromised - it seems as though the attackers used a technique called credential stuffing to try out user credentials for the service in bulk. It is likely that the attacker bought a large amount of stolen user credentials on the Dark Web. By attempting logins with that massive list of credentials, the attacker was successful in comprom

41323
mmaner
New Voice
K
khumphreyRetired Webrooter
published in Security Expert Perspectives
Zero Trust: Hype vs. RealityBlog

Zero Trust is a security approach that has gained significant attention in the cybersecurity world in recent years. But what is Zero Trust, and how effective is it in protecting against cyber threats? Cybersecurity professionals are rightfully skeptical of phrases that suddenly become buzzwords overnight. However, there are many legitimate technologies and policies that fall under the umbrella term “Zero Trust”. In this post, we will explore the concepts and technologies involved in Zero Trust and attempt to differentiate marketing hype from factual evidence. DefinitionFirst, let’s define zero trust. At its core, Zero Trust is a security model that assumes all users and devices within a network are untrusted and potentially malicious. This means that, rather than relying on the traditional perimeter-based security model which assumes that everything inside the network is trusted, a Zero Trust approach treats all access requests as coming from an untrusted source. There are a few other

70734
C
New Member

Badges

Show all badges

Join the Conversation

Terms & Conditions