CHANGING BAD PASSWORD HABITS But unlike the rest of us, cybercriminals are experts in passwordology. They know our habits-that we use the same passwords or password variations- and they leverage that knowledge not only to exploit us, but to make money. Compromised credentials are one of the biggest threats facing brokers today. SPENCER HEATON A&S SYSTEM CONSULTANTS W e all have too many passwords to keep track of. We never remember the last one we used or the one we just changed. DECEMBER 2019 At the IBAO Convention, we ran free DarkWeb scans for attendees. Over 90% of the scans revealed attendee credentials for sale on the DarkWeb for as little as $2. With the recent breaches of sharethis.com and canva.com (sites many brokerages use for social media marketing) we re-ran 24 the same scans. The number jumped to over 96%. There are many ways to minimize the threat-multi-factor authentication, single sign-on, automated password management and user awareness training. But these solutions are only effective if they're implemented across all attack vectors, which are all the different ways an attacker can attempt to get into your system or network, which include email links or attachments, compromised websites or credentials. It only takes one user's password to allow an attacker to gain access to your business' or clients' data. WWW.IBAO.ORGhttp://www.sharethis.com http://www.canva.com http://www.as-consultants.ca/ http://WWW.IBAO.ORG