As we continue to focus on keeping your business ahead of the latest cyberthreats, we recently conducted an assessment to detect clients and users who were storing passwords in plan text on their systems or in their shared cloud files such as SharePoint or Google Drive. To our surprise, we found that a staggering 9% of our clients were storing passwords and other critical information using insecure methods. If your organization was one of those we detected, you have already been notified directly.
These files are low-hanging fruit for any threat actor who gains access to your environment. The abundance of exposed passwords found in our initial scan made it clear that we should make this a permanently available feature and conduct regular scans for our managed clients. We’re excited to share that this new feature, Credential Reports, is now live for all managed clients at no additional monthly charge to you.
The new Credential Reports feature leverages AI to identify when a file that potentially contains exposed passwords is detected on your systems, has been accessed, or potentially breached.
With Credential Reports, you’ll be able to proactively identify and secure any files containing exposed passwords located on your systems before hackers can get their hands on them.
We have three key recommendations for your organization:
- Remove these files as soon as possible from any network shares, cloud file sharing services such as SharePoint, OneDrive, or Google Drive, and any local computer hard drives such as your Desktop or my Documents Folders.
- Utilize a secure password manager instead of an insecure spreadsheet.
- If you’re not already using a secure password manager, we highly recommend 1Password as it is purpose built for the secure storage of critical passwords.
- Never store passwords or other critical credentials in Word, Excel, or PDF file types…even with a password.
If you have further questions or want to know more about how to best secure your data and passwords, please reach out to your account manager or contact our account management team:
USA – 612.339.0838 x3 / email@example.com
Canada – 604.800.2218 x3 / firstname.lastname@example.org
Share This Post
nology empowers small and midsized organizations with top-tier expertise, proactive support, and strategic technology insights that keep your organization secure and efficient.