Expert Comment on data breach of the federal court system
July 2022 by Patrick McBride, CMO at Beyond Identity
Following the news that the Justice Department is investigating a data breach of the federal court system, Patrick McBride, CMO at Beyond Identity comments the following:
“With Nation-State cyber threats remaining at an all-time high, cyber security measures and protocols need to match the threat level. Threat actors are constantly taking advantage of outdated security measures that make it easy, and inexpensive to breach systems. It is interesting to note that the US’s 2022 Zero Trust mandate called for the use of unphishable, and passwordless Multi-Factor-Authentication (MFA), which is designed to remove a glaring hole and significantly increase the cost of an attack for Nation-State adversaries.
With the US now ahead of the curve, urging business and federal departments to move away from insecure passwords and weak MFA, it’s time the UK government caught up and fixed a major vulnerability. With the UK still stuck on the use of ‘longer, stronger’ passwords, it is evident this isn’t enough to protect sensitive data. The new baseline of protection is “passwordless and phishing resistant MFA” and it’s about time the industry and government recognises the need for stronger, more robust alternatives."