Forest Global Training Partners

Cyber Risks · Cisco Talos

What NIST’s latest password standards mean, and why the old ones weren’t working

Summary: NIST has proposed new password guidelines that drop requirements for special-character and number mixtures and frequent password changes, since studies show those rules push users toward guessable passwords like "$ummer2024!" or "P@ssword" and toward storing hard-to-remember passwords on paper or in .txt files. The proposals are not mandatory and remain open to public and industry comment before being codified.

What you should know: Years of composition and rotation rules produced passwords like "P@ssword" and credentials written on paper next to the machine - the guidelines now favor length over complexity, and nothing forces any organization to adopt them.

Read the original at Cisco Talos ↗

Topics
Malware
Mentions
CVE-2024-43572CVE-2024-43573
Related