Report: The bigger the company, the messier the password practices

A new report from password management company LogMeIn found that the bigger the enterprise, the bigger the problem when it comes to managing passwords.

A new report from password management company LogMeIn finds that the bigger the enterprise, the bigger the problem when it comes to managing passwords.

The company’s recently released Global Password Security Report scores its 43,000 customers on password strength, reuse, and use of multi-factor authentication.

While the average score equaled a 52 out of 100 — a score LogMeIn considers to be good — the numbers generally showed the larger the company, the lower the average security score. The report pins the trend on the fact that more employees bring more passwords and unsanctioned apps, as well as extra opportunities for dangerous password behaviors.

“Passwords continue to be a challenge to cybersecurity in the workplace, and attacks continue to grow in number and complexity every year. Despite these threats, businesses have struggled to quantify their own level of password risk,” said Gerald Beuchelt, Chief Information Security Officer at LogMeIn.

That level of risk hasn’t trickled down to the end users, with the report also finding that employees are sharing an average of six passwords with their coworkers.

One positive takeaway from the report is the rise in multi-factor authentication. Around 45 percent of companies use the security measure, a twenty percentage point increase from last year’s report.

Among the sectors measured, technology companies fared the best when it came to their password practices. Tech companies beat out heavily-regulated industries like banking, health, Insurance and government when it comes to password hygiene.

Multi-factor authentication has long been a standard recommendation for enterprises and individuals alike. However, a study last year found that most people still have not heard of the practice.

We’ve seen the market move beyond passwords in recent months, with multiple companies touting security keys that allow for users to remove their bad password habits from their daily routines.

You can read the full report on LastPass’ website.

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• Jail time for Maine child in 764 marks turning point in federal law enforcement

Technology

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

• The Collective Cyber Defense letter wrote your next vendor questionnaire

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure