Blockchain Journal editor-in-chief David Berlind interviews Adam Lowe, the Chief Product Officer for Arculus, an exhibitor at Consensus 2023, about its digital asset and digital identity platform that allows enterprises to enable employees and users with a single smart card that stores their cryptocurrency keys, their application credentials (eg: Microsoft 365) and even their building entry credentials. The same smart card can even be used as a payments card (Arculus already supplies smart cards to many credit card-issuing financial institutions). 

Lowe explains that smart cards have been protecting keys for decades and have never been penetrated. Arculus claims to be the first to put payments, FIDO keys, WebAuth keys, and crypto-keys all on the same card using the same secure on-card microcontroller. Lowe highlights that enterprises are interested in the solution because no one wants to manage multiple systems to handle each of these different use cases.

David asks Lowe if the card and the infrastructure behind it includes all the technology to manage the multi-party permission structure that enterprises might want to apply to the way they involve multiple managers and executives in the cryptocurrency custody process.  Lowe responds that such permissions should be managed with smart contracts and that Arculus can then integrate with those smart contracts. However, other solutions — for example, one that's emerging from a partnership between Ledger and Etana Custody that was announced at Consensus 2023 — are launching in an effort to help enterprises with such permissions management. Even so, the consolidation of all those capabilities into a single smart card is, in Blockchain Journal's estimation, where things are heading. Even from an employee's point of view, nobody wants to carry three or four physical security tokens when they can just have one. 

Toward the end of the interview, Lowe explains some potential consumer applications: the card could be used as a secure digital identity to access things like email, social media, and banking. He also mentions that the card could be used for government applications such as voting, health records, and digital passports.

To watch the video version of this podcast or read its full-text transcript, go to:
/interview/arculus-offers-enterprises-crypto-key-storage-payments-2fa-system-access-and-more-one/

The video can also be watched on Blockchain Journal's YouTube Channel at https://www.youtube.com/watch?v=WLiYcuiVV0w

Arculus Offers Enterprises Crypto Key Storage, Payments, 2FA System Access and More on One Smartcard

Android, the mobile operating system developed by Google, incorporates several features designed to protect users from phishing attacks. Phishing is a malicious practice where attackers attempt to deceive users into disclosing sensitive information, such as usernames, passwords, or financial details. Android's security features aim to mitigate the risks associated with phishing and enhance user protection.

Android Features that Protect Users from Phishing

The 'HEAL Security Dispatch Daily Digest' is a comprehensive podcast dedicated to bringing the latest in cybersecurity trends and expert insights, particularly focusing on the intersection between healthcare and cybersecurity. Hosted by Richard Simmons from London, the podcast covers a diverse range of topics critical to understanding the landscape of digital security today. In this episode, listeners were briefed on multiple cybersecurity issues including the discovery of a new Android banking Trojan named BingoMod, the seizure of the cryptocurrency exchange Cryptonator by federal agents, the impersonation of major brands like Disney, Nike, and IBM in email phishing attacks, and the spotlight on healthcare cybersecurity trends for 2024. Furthermore, the episode discussed the actively exploited vulnerability in Avtech cameras, a lawsuit faced by cybersecurity firm CrowdStrike, the European Union's groundbreaking AI regulations, the emphasis on identity continuity in organizational security, and the spread of malware through a counterfeit version of Google Authenticator on GitHub. Each segment of the podcast not only presents pressing cybersecurity developments but also reflects the broader implications for digital ethics, regulatory responses, and the ongoing battle against cybercrime. 
https://healsecurity.com/

HEAL Security Dispatch Daily: Navigating Cyber Threats in Healthcare and Beyond

Welcome to the 'HEAL Security Dispatch Daily Digest,' where we break down the forefront of cybersecurity developments and insider knowledge, brought to you by 'HEAL Security.' Hosted by Richard Simmons out of London, this podcast delves into the intersection of healthcare and cybersecurity, marking today, Monday, September 9th, 2024, with a keen focus on current cyber threats and protective strategies in the digital space. In this edition, listeners are briefed on a spectrum of cyber incidents and innovations, from Chinese hackers leveraging Visual Studio Code to breach systems in Southeast Asia to Meta patching a crucial flaw in WhatsApp's privacy features. We explore the formidable challenge of RAMBO, a new cyber threat exploiting radio signals to circumvent traditional security from air-gapped networks, and report on a significant cyberattack causing the temporary closure of Highline Public Schools in Washington. The discussion extends to the exposure of 1.7 million American customers' credit card details in an attack on the SlimCD payments gateway, and highlights warnings from federal agencies about Iran-backed cyber threats targeting U.S. healthcare entities. As we traverse these critical updates, the podcast emphasizes the importance of robust cybersecurity measures, including adopting advanced encryption and fostering a culture of cybersecurity awareness, to combat the escalating landscape of digital threats. 
https://healsecurity.com/

Cybersecurity Frontline: Global Digital Threats and Defense Strategies

The "HEAL Security Dispatch Daily Digest," hosted by Richard Simmons in London, offers an incisive glimpse into today's pressing cybersecurity concerns, with a spotlight on the healthcare sector's unique vulnerabilities. The episode uncovers a worrying breach involving 1.3 million Android-based TV boxes, alerting listeners to the potential for remote control by malicious actors and emphasizing the necessity for user vigilance and manufacturer updates. It also delves into the repercussions of a 2023 data breach at 23andMe, costing the company $30 million in settlements due to compromised health and ancestry data, now bolstering its defenses with improved security measures. The digest doesn't shy away from technical advisories either, highlighting a critical CVE update that demands immediate patching to prevent exploitations and Microsoft's latest release of Office LTSC 2024, ingeniously catering to non-cloud users. Amid the looming 2024 US elections, Simmons explores cybersecurity strategies to defend the democratic process against growing threats, underscores an urgent patching call following a publicized exploit in Ivanti products, and navigates Google's advanced data security initiatives amidst scrutiny from the Irish Data Protection Commission. The episode concludes on a significant note, discussing US sanctions against Intellexa executives, signaling a tough stance against global surveillance abuse, making the "HEAL Security Dispatch Daily Digest" an essential listen for those keen on navigating the intertwined realms of cybersecurity and healthcare. 
https://healsecurity.com/

HEAL Security Daily: From Compromised Android Boxes to Election Cybersecurity

The HEAL Security Dispatch Daily Digest, hosted by Richard Simmons from London, tackles an array of pressing cybersecurity issues with a special focus on the healthcare sector. On the 20th of September 2024, the podcast delves into a plethora of cybersecurity developments and concerns. Among the topics discussed is Microsoft Edge's upcoming feature aimed at alerting users to extensions that could slow down their browsing, enhancing overall performance and user satisfaction. Additionally, the episode sheds light on the activities of the Marko Polo hackers, responsible for numerous online scams, and stresses public vigilance against such threats. A significant focus is placed on healthcare IT security at the TribalNet 2024 conference, where the integration of security measures in Indian Health Service's rollout of PATH EHR is highlighted. The federal audit's criticism of the Cybersecurity and Infrastructure Security Agency's scaled-back efforts on disinformation counters is also examined, alongside the announcement of Windows Server 2025's capability to receive security updates without restarts. Disney’s reaction to a severe data breach by discontinuing Slack showcases corporate responses to digital security threats. Furthermore, a critical vulnerability in MediaTek chipsets endangering millions of Android smartphones is discussed, as well as the Vice Society's INC ransomware attacks targeting U.S. healthcare organizations, underscoring the paramount importance of robust cybersecurity measures in safeguarding sensitive data and infrastructure. 
https://healsecurity.com/

HEAL Security Dispatch: Navigating Cybersecurity Trends in Healthcare and Beyond

The latest episode of this cybersecurity-focused podcast covers a wide range of emerging digital threats, from online scams to advanced cyberattacks. Topics include scammers exploiting Tunnel of Love cruises to deceive romantics, a critical security vulnerability in SonicWall firewalls being actively exploited, and the Lazarus Group’s use of a new JavaScript implant targeting software developers. The episode also discusses the infiltration of Steam by the PirateFi game distributing malware, a new phishing kit bypassing two-factor authentication, and concerns over the misuse of open-source AI models by cybercriminals. Additionally, it highlights a significant zero-day vulnerability in PostgreSQL linked to a cyberattack on the US Treasury, Grip Security's launch of a new SaaS security solution, and CyberArk’s acquisition of identity security firm Zilla. The podcast concludes with Microsoft’s warnings about Russian hackers using "device code phishing" to compromise accounts. 
https://healsecurity.com/

Cyber Attacks, Scams, and New Security Defenses: SonicWall, Steam, CyberArk, and More

The HEAL Security Dispatch Daily Digest is a comprehensive cybersecurity podcast hosted by Richard Simmons from London, providing timely updates and expert insights at the intersection of healthcare and digital security. Each episode delivers a curated briefing on the latest cyber threats, industry responses, and technological developments. In one installment, the podcast covers a range of pressing issues, including credential stuffing attacks targeting The North Face, efforts by Microsoft and CrowdStrike to unify threat actor naming conventions, the emergence of a dangerous Android malware dubbed Crocodilus, and ongoing cybersecurity incidents affecting hospitals across Maine. Additional segments highlight risks posed by malicious AI-generated video ads on social media, a new caregiving feature debuting in Amazon Pharmacy's Medicare services, and the infiltration of counterfeit RubyGems packages threatening software developers. With its focus on real-world threats and proactive solutions, the podcast serves as a trusted daily digest for professionals navigating the evolving cybersecurity landscape. 
https://healsecurity.com/

Credential Stuffing Hits The North Face, and Amazon Pharmacy Expands Medicare Access

2FA (Two-Factor Authentication) hay xác thực hai yếu tố là phương thức bảo mật thêm một lớp an toàn cho tài khoản người dùng. Ngoài mật khẩu, người dùng cần nhập thêm mã xác minh được gửi qua SMS, email, ứng dụng tạo mã hoặc dùng thiết bị vật lý như Security Key để đăng nhập. Mục đích chính là hạn chế rủi ro bị đánh cắp tài khoản nếu mật khẩu bị lộ.

Cơ chế hoạt động của 2FA: Sau khi nhập mật khẩu, người dùng phải cung cấp thêm mã 2FA để hoàn tất đăng nhập hoặc thực hiện các hành động quan trọng như rút tiền, thay đổi thông tin.

Các Phương thức 2FA (Xác thực hai yếu tố) phổ biến:

1. Nhận mã qua tin nhắn SMS

2. Tạo mã bằng ứng dụng Authenticator (Google Authenticator, Duo, v.v.)

3. Dùng khóa bảo mật USB

4. Recovery Codes (mã khôi phục) dự phòng khi mất thiết bị xác thực.

Hướng dẫn cài đặt 2FA cho mạng xã hội Facebook:

Có thể thiết lập trực tiếp trên trang web Facebook hoặc qua ứng dụng di động bằng cách vào phần Bảo mật và đăng nhập, chọn Xác thực hai yếu tố, sau đó liên kết với ứng dụng xác thực bên thứ ba.

Giải đáp thắc mắc về 2FA:

2FA không phải là CAPTCHA. CAPTCHA chỉ kiểm tra người dùng là con người, không phải lớp bảo mật hai yếu tố.

Khi bật 2FA, đăng nhập sẽ mất thêm bước nhưng bù lại giúp ngăn chặn truy cập trái phép.

Đọc chi tiết tại: https://www.fptcloud.com/2fa-la-gi

#2fa #xacthuchaiyeuto #twofactorauthentication

Mã bảo mật 2FA là gì? Hướng dẫn cài đặt và kích 2FA (Xác thực hai yếu tố)

The world's leading source of information for enterprises and businesses looking to use blockchain as an application platform for digital transformation, business innovation, customer engagement, and industry disruption.

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

FPT smart Cloud là nền tảng Điện toán Đám mây thế hệ mới, được xây dựng theo quy chuẩn Cloud Quốc tế.

New tracks tagged #twofactorauthentication