{"id":4255,"date":"2019-02-13T16:25:34","date_gmt":"2019-02-13T20:25:34","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=4255"},"modified":"2019-02-13T16:25:34","modified_gmt":"2019-02-13T20:25:34","slug":"key-findings-the-spycloud-2018-annual-credential-exposure-report","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/key-findings-the-spycloud-2018-annual-credential-exposure-report\/","title":{"rendered":"Key Findings: The SpyCloud 2018 Annual Credential Exposure Report"},"content":{"rendered":"

\"Key<\/p>\n

We here at Solutions Review frequently discuss the issues surrounding credential exposure and password security. We focus in on these issues concerning identity and access management because the vast majority of users, both employees and privileged users, interact with the digital perimeter and their identities through their credentials. Therefore, credential exposure remains a key security issue. <\/span><\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n

To highlight the severity of the credential exposure epidemic, we consulted the <\/span>SpyCloud 2018 Annual Credential Exposure Report<\/span><\/a>. SpyCloud serves as a breach prevention and account takeover prevention solution provider. <\/span><\/p>\n

Here\u2019s what we learned.<\/span><\/p>\n

The SpyCloud 2018 Annual Credential Exposure Report <\/b>\u00a0<\/span><\/h3>\n

According to SpyCloud, of the 3.5 billion exposed credentials they recovered in 2018 password, exactly reused credentials account for 24%. 90% of the reused passwords were nearly identical. A study of 1 billion leaked user accounts found 20% reused the exact same password, and 27% used a near identical password. <\/span><\/p>\n

SpyCloud also comments on the paradox of encryption concerning account exposure. Encrypting passwords can help enterprises secure their users\u2019 passwords; however, the most common forms of encryption only provide a weak barrier against hackers. Hackers have learned how to crack hashes such as unsalted md5 and sha1. <\/span><\/p>\n

Therefore, enterprises should take <\/span>more steps to protect their users\u2019 passwords<\/span><\/a> and credentials. Deploying and enforcing multifactor authentication or at least two-factor authentication can mitigate credential exposure. \u00a0<\/span><\/p>\n

The SpyCloud Findings in Context<\/b><\/h3>\n

The SpyCloud report on account exposure doesn\u2019t exist in a vacuum. In fact, their findings support a wide range of studies demonstrating the issues <\/span>surrounding user passwords<\/span><\/a>. These studies reveal: \u00a0<\/span><\/p>\n