Skip to main content

Critical vulnerability in PHP

Critical vulnerability in PHP. Plan to patch immediately, especially for internet facing systems. Contact your vendor or see https://www.php.net for more information.

Read More

YALE-MSS-9.2.2: Do not reuse passwords for multiple accounts

Standard:
YALE-MSS-9.2: Utilize secure passwords for authentication

YALE-MSS-9.2.2: Do not reuse passwords for multiple accounts

Low Risk Endpoint Required Moderate Risk Endpoint Required High Risk Endpoint Required Low Risk Server Required Moderate Risk Server Required High Risk Server Required Low Risk Mobile Device Required Moderate Risk Mobile Device Required High Risk Mobile Device Required Low Risk Network Printer Required Moderate Risk Network Printer Required High Risk Network Printer Required

Details

Password reuse makes a user more vulnerable to credential stuffing. Credential stuffing is a technique where attackers take breached credentials from one platform and attempt to use them elsewhere. This attack relies on users having the same credentials across multiple sites.

Unique passwords must be used for all accounts.

Your Yale NetID password must not be used for any other account, including personal accounts.

Consider using a password manager. Additional information can be found at the link below.

https://cybersecurity.yale.edu/protect-your-identity