BrandPost: Please Don't Pass the Hash: Five Steps to Mitigate Attacks

Hackers have been launching credential-stealing “pass-the-hash” PtH attacks for at least 15 years, and not just against Windows systems. Today, these devastating attacks can be successfully mounted against any operating system or authentication protocol. In these attacks, an intruder – or employee – steals the logon credentials from a compromised computer and acquires the user’s password hash from the computer’s memory or file system. With this authentication token, the attacker c