Report: 25% of S&P 500 have SSO credentials exposed on dark web

Single sign-on (SSO) qualifications are viewed as “the keys to the kingdom” by cybersecurity pros. Workers accessibility many applications by logging in the moment with these qualifications, and they are the past thing an group wishes stolen or for sale on the dim world-wide-web. If destructive actors attain your organization’s SSO credentials, they could accessibility your techniques and info like a dependable insider, together with payroll, contracts, intellectual residence, and far more.

In shorter, a malicious actor can inflict sizeable damage on an organization by getting its SSO credentials. 

However, even the world’s greatest and most important corporations are battling to protected these essential belongings. Scouring the darkish net for critical SSO qualifications connected with 3,000 publicly traded corporations, BitSight located that 25% of the S&P 500 and fifty percent of the leading 20 most beneficial public U.S. providers have had at minimum one SSO credential for sale on the darkish world-wide-web in 2022.

These influenced corporations — symbolizing $11 trillion in benefit — may possibly be at threat, along with their international purchaser bases.

Technological know-how sector most affected

BitSight also recognized the technology sector as becoming most impacted. This is significantly relating to specified modern occasions — poor actors are significantly breaching technological know-how corporations as a suggests of breaching wide consumer bases.

“Businesses want to be aware of the threats posed by their important IT sellers. As we’ve found frequently, insecure seller qualifications can give destructive actors with the accessibility they want to goal significant purchaser bases at scale. The affect of a one uncovered SSO credential could be much achieving,” stated BitSight Cofounder and CTO Stephen Boyer.

Popularized cybersecurity controls are no more time adequate — corporations with solid safety controls in put are still obtaining breached. BitSight endorses organizations up their game by deploying extra dynamic and strong security measures these kinds of as dynamic MFA, universal two-variable authentication (U2F), and a host of other controls these kinds of as utilizing the very least privilege and third-get together threat management. 

BitSight’s investigation alerts the worldwide business group to the significant danger of SSO credential theft. The truth is that even with a heightened point out of stability among the general public companies, SSO qualifications are still getting stolen and sold on the dark web at staggering rates.

Methodology

BitSight analyzed the security posture of a few thousand publicly traded organizations to comprehend how the world’s most worthwhile and most effective-resourced businesses are preserving their critical SSO credentials.

Study the whole report from BitSight.