Sign in
  • News
  • Interviews
  • 2021: The Comeback Year
  • Articles
  • Insights
    • Guest Post
    • Use Cases
  • Quick Bytes
Sign in
Welcome!Log into your account
Forgot your password?
Privacy Policy
Password recovery
Recover your password
Search
Tuesday, March 2, 2021
  • Sign in / Join
Sign in
Welcome! Log into your account
Forgot your password? Get help
Privacy Policy
Password recovery
Recover your password
A password will be e-mailed to you.
ITSECURITYWIRE FAVCON ITSECURITYWIRE FAVCON ITSecurityWire
  • News
  • Interviews
  • 2021: The Comeback Year
  • Articles
  • Insights
    • Guest Post
    • Use Cases
  • Quick Bytes
Home News SpyCloud Strengthens Active Directory Guardian with New Password Filter
  • News

SpyCloud Strengthens Active Directory Guardian with New Password Filter

By
ITsec Bureau
-
February 12, 2021
6
SpyCloud Strengthens Active Directory Guardian with New Password Filter

SpyCloud, known for its unique anti-fraud platform powering account takeover prevention and fraud investigations solutions, today announced it has added a new password filter feature to SpyCloud Active Directory Guardian.

With dozens or hundreds of online logins to manage, people often take shortcuts to keep track of their passwords. They use memorable words or names, easy-to-type strings such as “12345678”, or even passwords they’ve used before. Because these habits are so commonly followed, they also are easy for bad actors to figure out. As a result, for the last four years, weak and stolen passwords were consistently the top hacking technique identified in the Verizon Data Breach Investigations Report.

Read More: The Future of OT Security Strategy in Critical Infrastructure

SpyCloud Active Directory Guardian now automatically prevents employees from setting risky passwords using a password filter. When an employee sets a new Active Directory password, the password filter automatically screens the choice for repeated or sequential characters, up to 30,000 entries in a custom dictionary, and billions of exposed passwords found in SpyCloud’s industry-leading database of recovered breach data.

“Despite repeated warnings, people still try to use common and weak passwords,” said Chris Hajdu, Product Manager at SpyCloud. “It’s a very human thing to do simply because we all have so many accounts and passwords to keep track of, but businesses can’t afford to let these habits put their networks at risk.”

Using Active Directory Guardian’s existing capabilities and the new password filter together, enterprises can enforce stronger passwords and reduce their risk of a data breach caused by weak or stolen credentials. The password filter ensures that employee accounts are protected with secure credentials from the moment a new password is created. As new breaches occur over time and compromise more credentials, Active Directory Guardian can make sure employee logins remain secure by detecting and resetting exposed passwords automatically.

Because the password filter runs on the domain controller, the password filter is designed to “fail open” to minimize any potential impact on business operations. In other words, if the password filter fails for any reason, it will allow users to create unchecked passwords rather than locking them out. Running scheduled or manual scans with Active Directory Guardian provides backup for skipped passwords that might otherwise slip through the cracks.

The password filter also reduces the time and resources required to align with NIST password guidelines, particularly the challenging guidance to check for and reset “commonly-used, expected, or compromised” passwords. While some NIST password guidelines can be satisfied using the built-in settings within directory services, identifying new data breaches and checking them against user passwords can be a labor-intensive process. Using the password filter, enterprises can block passwords NIST considers weak or compromised, drawing on SpyCloud’s ever-growing database of exposed passwords.

  • TAGS
  • Active Directory Guardian
  • fraud investigations solutions
  • SpyCloud
  • unique anti-fraud platform powering account
Previous articleIDX Announces Cybersecurity Healthcheck for Organizations in Conjunction with No-Cost Data Breach Services Agreement
Next articleCoalfire Federal Names Stuart Itkin to Lead CMMC Assurance Practice
Avatar
ITsec Bureau
http://itsecuritywire.com/

RELATED ARTICLESMORE FROM AUTHOR

Azkar Choudhry Joins Cyber Group

Azkar Choudhry Joins Cyber Group

OneTrust Acquires DocuVision's Redacted ai to Expand Automated Data Redaction

OneTrust Acquires DocuVision’s Redacted.ai to Expand Automated Data Redaction

QOMPLX_ a Leader in Cloud-Native Risk Analytics_ Elects to Become a Public Company Through a Merger with Tailwind Acquisition Corp

QOMPLX, a Leader in Cloud-Native Risk Analytics, Elects to Become a Public Company Through a Merger with Tailwind Acquisition Corp

Latest posts

WhiteSpace Alliance, Security Surveillance, Video Surveillance,

WhiteSpace Alliance Sees New Use Cases Emerging for TV White Space Communications

May 26, 2020
Health System

Sectra Signs Enterprise Imaging Contract With Academic Health System

August 18, 2020
UnitedLex Advances Suite of Digital Offerings with Acquisition of Paul Hastings’ Groundbreaking Data Science Team and Unique AI-Driven Capabilities

UnitedLex Advances Suite of Digital Offerings with Acquisition of Paul Hastings’ Groundbreaking Data Science Team...

June 11, 2020
Cyberattacks

empow Announces the Launch of a new XDR Product to Help Organizations React Faster to...

August 14, 2020
Innovative Inline Bypass TAPs

Garland Technology Announces New EdgeLens® Series of Innovative Inline Bypass TAPs

July 29, 2020


An invaluable resource for all your IT security initiatives and assets.

Knowledge sharing platform for all IT security needs and plans. Peer to peer conversations that leverage industry experts and leaders for ideas, opinions and business insights.

Media@ITSecurityWire.com
Sales@ITSecurityWire.com

Recent Posts

  • Cyberattackers Target QuickBooks to get Access to Databases
  • Hackers Use SEO to Deploy Malware Payloads 
  • Bots Attacks are on a Rise Amidst the Pandemic 
  • Azkar Choudhry Joins Cyber Group
  • OneTrust Acquires DocuVision’s Redacted.ai to Expand Automated Data Redaction

Visit Our Other Publication

Quick Links

  • About Us
  • News
  • Featured Articles
  • Featured Interview
  • Guest Post
  • Privacy Policy
An Imprint of OnDot ® Media © | All rights reserved | Privacy Policy