Apps

Vivek Ramachandran discusses modern browser security, emphasizing that traditional URL analysis is outdated. With employees spending over 90% of their work time in browsers, security solutions must innovate here. His company, SquareX, aims to counter emerging threats using browser-native technology and machine learning for attack detection. Recent vulnerabilities in mail services suggest that existing protections are insufficient, particularly against clever social engineering tactics. Ramachandran believes future browser security will function as an AI-enabled security assistant, adapting to user needs amidst evolving threats.

https://blog.1password.com/browser-security-risks-vivek-ramachandran-interview/

FBI and CISA urged against SMS-based MFA due to interception risks, especially after cyberattacks like Salt Typhoon. Security experts have long advised moving to stronger alternatives. SMS can be compromised through SIM swapping, smishing, and MitM attacks. Despite its vulnerabilities, it's still widely used. Companies need layered approaches to replace SMS with secure options like FIDO, non-SMS authenticator codes, and password managers. Strong authentication should be enforced across all organizational levels, as weaker accounts are often less secured.

https://blog.1password.com/sms-based-mfa-risks/