[TheRecord] CISA adds single-factor authentication to its catalog of ‘Bad Practices’

Earlier this year, in June, the US Cybersecurity and Infrastructure Security Agency (CISA) launched a new project called “Bad Practices” that consisted of a catalog of non-recommended cybersecurity practices, techniques, and configurations.

The initial list only included two entries, but in an update today, CISA officials added a new “bad practice” to their list—namely, the use of single-factor authentication for remote or administrative access systems.

“Single-factor authentication is a common low-security method of authentication,” the agency said in a press release today. “It only requires matching one factor—such as a password—to a username to gain access to a system.”

Instead, CISA recommended that organizations check its guide for implementing strong authentication [PDF], where multi-factor authentication is the recommended method of securing not only internet-connected accounts but also accounts of any kind.

CISA Bad Practices catalog

Currently, the CISA Bad Practices catalog includes the following entries:

Use of unsupported (or end-of-life) software.Use of known/fixed/default passwords and credentials.Use of single-factor authentication for remote or administrative access to systems.

Other bad practices CISA officials are currently considering adding to their catalog include the likes of:

Using weak cryptographic functions or key sizes.Flat network topologies.Mingling of IT and OT networks.Everyone’s an administrator (lack of least privilege).Utilization of previously compromised systems without sanitization.Transmission of sensitive, unencrypted/unauthenticated traffic over uncontrolled networks.Poor physical controls.

Security experts can also recommend other “bad practices” via this GitHub page.

The post CISA adds single-factor authentication to its catalog of ‘Bad Practices’ appeared first on The Record by Recorded Future.

Source: Read More (The Record by Recorded Future)

You might be interested in …

[TheRecord] Romanian government says websites attacked by pro-Russian group

Romania’s national cybersecurity response team and intelligence agency said several websites connected to government agencies and a bank were hit with distributed denial-of-service attacks on Friday. The National Directorate of Cyber ​​Security (DNSC) said in a statement that the websites for Romania’s government, ministry of defense, border police, national railway company were attacked by a […]

Read More

[ZDNet] Cloud security is too important to leave to cloud providers

All posts, ZDNet

11 cloud vulnerabilities that keep customers up at night. Source: Read More (Latest topics for ZDNet in Security)

Read More

[SecurityWeek] Upskilling Cyber Defenders Requires a Readiness Environment

All posts, Security Week

The cybersecurity threat landscape never stands still.  New threats and threat actors appear all the time. They are highly trained, well-funded, and leverage the newest tools to pursue some form of cybercrime — extortion, terrorism, data theft, the list goes on.  read more Source: Read More (SecurityWeek RSS Feed)

Read More

Leave a Reply

Your email address will not be published.

This site uses Akismet to reduce spam. Learn how your comment data is processed.