Tackling The Modern Enterprise Auth Challenge

Aug 2, 2022 | Data, Social Media

By Peter Kelley

Veridium and TAG Cyber unpack three of the major adoption drivers for enterprise adoption of trusted digital identities in the new report “Addressing the Modern Enterprise Authentication Challenge,”and offer guidance to overcome them.

TAG Cyber CEO and Founder, Dr. Edward Amoroso, said: “The business forces driving decisions about modern authentication must balance the recommendations of those groups charged with security, compliance and corporate brand reputation with the recommendations of sales and marketing-oriented teams such as digital experience managers, eCommerce operators, and IT service designers.”

The report identifies three of the top reasons that companies are moving to modern authentication and trusted digital identities:

1. Security:  59% of organizations had experienced a phishing attack in the last year. Moreover, the speed with which identity-exploiting threats now emerge and morph makes them progressively tougher to detect and mitigate.

2. Usability: ease-of-use often determines the success of eCommerce applications and other digital experiences, and any undue friction leads to failure

3. Accessibility: measures the availability, usability and simplicity associated with the password, cryptographic certificate, token, or other means that establishes and proves a reported identity.

Securing the Success of Modern Authentication Adoption Initiatives

To reduce the overall friction associated with whatever strong validation controls are selected, TAG Cyber recommends:

– Early Design Cooperation – early input and participation from cross organizational team members to drive adoption

– Flexible Solutions – ensuring that the authentication control can be adjusted, tailored, and modified based on reported experiences to fine tune and optimize the user experience, and reduce the potential for friction between security and experience designers.

– Reliance on Metrics – accurate metrics from live production deployment

Veridium Chief Product and Operating Officer, Baber Amin, said: “Over the last several years and in particular, over the last two years, trusted digital identities have increasingly become the key, both to hyperconnected exchanges such as eCommerce, loyalty and customer service applications, and for the day to day, line of business exchanges among employees within an enterprise.”

The report is in follow up to the recent TAG Cyber report ‘What Keeps a CISO Up at Night’ [in 2022]. Veridium experts can quickly address questions.

To register for the Webinar “Addressing the Modern Enterprise Authentication Challenge” which will be held at 1:30 pm ET on Wednesday, August 17, 2022 with Veridium and Dr. Edward Amoroso of TAG Cyber, visit: https://register.gotowebinar.com/register/5815477951917629200.

stars

Figure 1:  Forces Affecting Authentication Friction

Source: TAG Cyber

 

 

 

 

 

Top 10 Cybersecurity Stories This Week: PHP2Shell Threatens 5.1 Million Internet-Exposed PHP Servers With Unauthenticated RCE, Eight eMudhra CA Private Keys Cracked From Public Certificates, CISA and FBI Warn SafePay Ransomware Has Hit 600+ Critical Infrastructure Organizations

Top 10 Cybersecurity Stories This Week: PHP2Shell Threatens 5.1 Million Internet-Exposed PHP Servers With Unauthenticated RCE, Eight eMudhra CA Private Keys Cracked From Public Certificates, CISA and FBI Warn SafePay Ransomware Has Hit 600+ Critical Infrastructure Organizations

October 23, 2026 | ITBriefcase.net Why it matters: Tuesday, October 21 delivered one of the heaviest single-day security disclosures of the year: PHP2Shell, GitLab CVE-2026-110264, and Node.js security releases all shipped simultaneously, each carrying unauthenticated...

read more
Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

October 16, 2026 | ITBriefcase.net Why it matters: Microsoft's October 2026 Patch Tuesday is the largest software security release in the company's history — 1,411 flaws, three zero-days, 75 critical vulnerabilities, and a live Windows Shell security feature bypass...

read more
Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

October 9, 2026 | ITBriefcase.net Why it matters: The FBI and US Secret Service issued a joint advisory on October 6 confirming that the FortiBleed credential-harvesting campaign — which has compromised credentials for 86,644 Fortinet FortiGate firewalls and SSL VPN...

read more
Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

October 2, 2026 | ITBriefcase.net Why it matters: Citrix disclosed two critical remote code execution zero-days in NetScaler ADC and NetScaler Gateway on September 27 — CVE-2026-88771 (CVSS 9.5, unauthenticated RCE in default configuration, no special setup required)...

read more
Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

September 25, 2026 | ITBriefcase.net Why it matters: Attackers compromised Brevo — the email marketing and CRM platform used by eBay, Louis Vuitton, Michelin, Amnesty International, and more than 100,000 other businesses — by exploiting a hardcoded, long-lived...

read more