Menu

The Password Review

Part of the Security Fundamentals section of Coddy's Cybersecurity journey. Lesson 26 of 43.

Challenge

Medium

Ticket from Sam, IT lead

A second supplier has reported stolen passwords, and new MFA requests are appearing. Read the notice and recent sign-ins. Replace only the passwords confirmed as stolen.

One person in the notice uses a different password at Lumen and has a normal sign-in from home. Leave that person alone. Keep all current staff active and preserve the minimum length, common-password block, MFA requirement and number matching.

Try it yourself

Terminal

All lessons in Security Fundamentals

1The First Alert

What Is Cybersecurity Stopping an Attack Log Lines Stolen Passwords Multi-Factor Authentication The CIA Triad Back for More

4Passwords

Long Passwords Common Passwords Password Spraying Morning Cleanup Credential Stuffing MFA FatigueThe Password Review

7Incident Response

Incident Response Contain, Don't Destroy What They Left Behind Recovery The Incident Report The Night Alert

2Phishing

Phishing Look-Alike Domains Who Clicked The Second Wave

5Email Attacks

Reply-To Dangerous Attachments Where an Email Came From The Invoice Queue Business Email Compromise Blocking a Sender Mailbox Rules The Phishing Reports

3Access Control

Groups Least Privilege Admin Rights The New Hire Leavers Shared Accounts Separation of Duties The Access Review

6Rules of the Job

Authorization No Hacking Back The Vendor's Call