Skip to content

密碼時代的終結:160億帳戶外洩事件告訴我們什麼

160 億筆憑證外洩:為密碼時代敲響的最後警鐘 

近期包含 Google、Apple 和 Facebook 在內的服務中,多達 **160 億筆**登入憑證遭到外洩,這不僅僅是又一起資料外洩事件,它更是宣告密碼時代終結的決定性事件。此次事件由資訊竊取惡意軟件( Infostealer)引起,外洩的憑證現正於暗網上被積極交易,揭示了我們數碼身份基礎設施中的系統性失靈。以密碼為基礎的安全時代已經結束。

固有的缺陷:為何密碼注定失敗

多年來,密碼一直是數碼安全中最薄弱的一環。它們從根本上就易受各種日益增長的威脅所攻擊,從暴力破解到精密的釣魚詐騙。人類心理是問題的核心;我們出於方便,會創建簡單、可預測的規律,或在多個服務中重複使用相同的密碼。這使得一組被盜的密碼變成了一把萬能鑰匙,足以解鎖個人的整個數碼生活,導致身份盜竊、金融詐騙和災難性的企業資料外洩。

新典範:無密碼驗證

為應對此情況,一個新的安全典範已變得至關重要:**無密碼驗證**。基於像 FIDO2 這樣的全球標準,此方法無需密碼即可驗證用戶,而是利用不易被竊取或猜測的因素,例如:你是誰(如指紋等生物辨識特徵)、你擁有什麼(如智能手機等設備),或你在哪裡(地理位置)。

其效益是革命性的。

  • 安全性大增:由於密碼已不存在,所有針對密碼的攻擊都將失效。

  • 用戶便利性提升:無需再記憶複雜的憑證。

  • IT 團隊解脫:終結了強制執行惱人的密碼政策和處理無盡重設請求的惡夢,讓他們能專注於更關鍵的安全任務。

從理論到企業實踐:iSIGN Password-less 的實現

要採納無密碼的未來,需要一個專為企業複雜性而設的解決方案。**Penta Security 的 iSIGN Password-less** 正是為彌補此差距而設計,能同時提供強化的安全性與無縫的用戶便利性。它不僅僅是移除作業系統的密碼,更深度整合了單一登入(Single Sign-On, SSO)功能。用戶只需一次簡單的設備登入,即可自動獲得授權,存取所有關鍵的業務平台,從協同作業軟件、ERP 到電子郵件。

此平台提供了企業精準地管理其安全環境所需的精細策略控制、整合式監控和異常偵測。憑藉全球安全認證(如通用標準 CC、優良軟件 GS)和穩健的加密模組,iSIGN Password-less 是一款為後密碼世界而設、企業就緒的解決方案。

無密碼驗證已不再是選項,而是安全與營運效率的新標準。

關於 Penta Security

Penta Security 採取全方位的策略來涵蓋資訊安全的每個面向。本公司持續努力,透過廣泛的 IT 安全產品,在幕後確保客戶的安全。因此,Penta Security 總部位於韓國,並已在全球擴展,成為亞太地區的市佔領導者。

作為韓國最早進入資訊安全領域的公司之一,Penta Security 已經開發出廣泛的基礎技術。我們將科學、工程與管理相結合,擴展自身的技術能力,並以此技術視角做出關鍵決策。

關於Version 2

Version 2 Digital 是立足亞洲的增值代理商及IT開發者。公司在網絡安全、雲端、數據保護、終端設備、基礎設施、系統監控、存儲、網絡管理、商業生產力和通信產品等各個領域代理發展各種 IT 產品。透過公司龐大的網絡、通路、銷售點、分銷商及合作夥伴,Version 2 提供廣被市場讚賞的產品及服務。Version 2 的銷售網絡包括台灣、香港、澳門、中國大陸、新加坡、馬來西亞等各亞太地區,客戶來自各行各業,包括全球 1000 大跨國企業、上市公司、公用事業、醫療、金融、教育機構、政府部門、無數成功的中小企及來自亞洲各城市的消費市場客戶。

Keepit continues momentum with 2025 TrustRadius Top Rated Award

Keepit has been recognized as a leader among SaaS Backup, Data Loss Prevention, Disaster Recovery, and Enterprise Backup categories.

 

Copenhagen, Denmark – June 10, 2025 – Keepit, a global leader in SaaS data backup and recovery, today announced that it has been recognized as TrustRadius Top Rated in four categories: SaaS Backup, Data Loss Prevention, Disaster Recovery, and Enterprise Backup. This recognition comes directly from customers, underscoring Keepit’s commitment to providing an intelligent and secure backup and recovery platform.

“Earning a Top Rated award on TrustRadius is a reflection of how well a product is meeting the needs of its customers,” says Allyson Havener, CMO, TrustRadius. “Keepit’s recognition is based entirely on customer feedback—real users who value the platform’s reliability, performance, and support.”

Since 2016, the TrustRadius Top Rated Awards have become the B2B’s industry standard for unbiased recognition of excellent technology products. Based entirely on customer feedback, they have never been influenced by analyst opinion or status as a TrustRadius customer. Here is a detailed  criteria breakdown of the methodology and scoring that TrustRadius uses to determine Top Rated winners.

Keepit provides independent backup to over 18,000 customers worldwide

Keepit backup and recovery solutions are currently available for eight workloads, such as Microsoft 365, Microsoft Entra ID, Google Workspace and Salesforce. The company will expand its offering in 2025 to include applications such as Jira, Bamboo, Okta and Confluence.

Keepit’s unique, intelligent, and cloud-native platform enables customers to safely secure their SaaS applications, ensuring full control of data regardless of unforeseen events such as outages, malicious attacks, or human error.

“SaaS backup has become an increasingly crucial part of risk management and business continuity planning. We are thrilled that our customers rely on Keepit to safeguard critical data and value their continued feedback and support. Accolades such as the Top Rated Award mean a lot to us as a company and further validate that our solutions meet our customers’ needs,” says Michele Hayes, CMO at Keepit.

Hear from verified users on how much they value Keepit: Keepit reviews on Trustradius.

 

Download the report

 

Defining data governance and data classification

So, what is data governance and how does it relate to cyber resilience?

Existing under the broad umbrella of data management, data governance is a program — implemented via policies and standards — intended to ensure the availability, quality, and security of an organization’s data in accordance with applicable regulations and obligations (e.g., adhering to industry standards, fulfilling requirements for certifications, etc.).

Within data governance, data classification is the process of separating and organizing data into relevant groups (“classes”) based on their shared characteristics, such as the level of sensitivity, risks they present, and the compliance regulations that protect them.

Data governance underpins cyber resilience plans

An intelligent data governance program delivers several beneficial outcomes for organizations:

  • It helps to ensure the availability, quality, and security of an organization’s data, making it a foundational pillar of business continuity.
  • Data governance helps improve overall data accuracy and impacts outcomes based on that data — which can range from comparatively simple day-to-day business decisions and operations to more complex, forward-looking initiatives including AI-focused programs.
  • It helps to support organizational efforts to comply with regulations and other obligations, making it a cornerstone of compliance.
  • An effective data governance program also permeates the entire organization, increasing data literacy, data accessibility, and data scalability.

Do you know where your data is?

Of course, disaster recovery planning cannot start without a clear understanding and mapping of your data and its significance to your business. What data is crucial for us to continue running our operations? Who needs access to which data to do their job? Where do we store all of this critical data?

Knowing the answers to these questions will start your journey towards ensuring continuity in cases of data loss or cyberattacks. This is achieved through an efficient and effective data governance framework.

I hope that, with our new report in hand, CISOs and CIOs will be able to future-proof their modern, data-driven enterprises through effective data governance.

About Keepit’s new report, “Intelligent data governance: Why taking control of your data is key for operational continuity and innovation.”

Our report takes a practical approach to data governance by offering a resource to organizations for creating or adopting a framework that works best for them.

Key takeaways from the report:

-Major trends shaping enterprise IT

-The importance of “always-on” data

-Resilience against data loss and corruption

-Data governance as an investment

-A practical approach to data governance

-10 questions for board discussions

Get the full report

About Keepit
At Keepit, we believe in a digital future where all software is delivered as a service. Keepit’s mission is to protect data in the cloud Keepit is a software company specializing in Cloud-to-Cloud data backup and recovery. Deriving from +20 year experience in building best-in-class data protection and hosting services, Keepit is pioneering the way to secure and protect cloud data at scale.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

ESET Annual Report 2024: Profit and revenue growth continues, R&D investment delivers strong returns

  • Global revenue growth of 9 per cent year-on-year to €691 million, with the EMEA region leading with 15 per cent
  • Adjusted EBITDA of €100 million, reflecting 7 per cent year-over-year growth
  • Total B2B revenue growth of 13 per cent, Enterprise of 21 per cent, and Services of 56 per cent

BRATISLAVA — June 30, 2025 — ESET, a global leader in cybersecurity solutions, today announced its financial results, with significant growth in key regions and markets, continuing profitability, and ongoing investment in science-led innovation.

“While many speak of long-term vision and longevity, few live it. 2024 saw ESET’s third consecutive decade of growth — a rare milestone in the technology sector, and one that reflects our progressive mindset, customer trust, and product excellence,” said Richard Marko, CEO of ESET. “We saw particularly strong momentum in the EMEA region, where our cybersecurity solutions continue to gain traction. This was further reflected by strong performance within our B2B segment, where overall revenue grew by 13 per cent, Enterprise grew by 21 per cent and ESET Services experienced exceptional growth of 56 per cent. As threats evolve, so does our commitment to meeting our customers’ need for innovation and resilience.”

R&D delivers immediate AI benefits for threat detection and response

In 2024, ESET’s 847-member-strong technologists and Global Research and Development team worked to revamp ESET LiveGuard Advanced (ELGA), our proprietary cloud-based security module that uses behavioral analysis to prevent targeted attacks and new or unknown threats. This essential work also leveraged our latest developments in Artificial Intelligence (AI), advancing both scanning and filtering and further reducing ELGA’s computing requirements in comparative tests.

Further development of ESET AI capabilities in 2024 saw us introduce ESET AI Advisor, which allows  detection and response teams to leverage multi-agentic AI in incident response and risk analysis. This empowers organizations to fully capitalize on extended detection and response (XDR), taking care of threats before they have a chance to become full-scale security incidents. ESET AI Advisor has also been built into ESET Inspect, the company’s XDR-enabling module of the ESET PROTECT Platform, which proved its worth during MITRE’s 2024 Enterprise ATT&CK® Evaluations.

“Our long-term investment in research and development continues to benefit an increasing number of customers and make a profound impact,” said Richard Marko. “Threat actors are making increased use of artificial intelligence and automated tooling; in turn, ESET’s attention to, and investment in, AI have not only helped us counter those malicious forces, but have boosted revenue growth in 2024, in particular within the B2B segment.”

Threat research and threat intelligence, usability, and defense enhanced for business customers and service partners

ESET Research remains at the core of our efforts, informing not only the prevention-enhancing capabilities and R&D of our products (such as ESET Threat Intelligence), but also providing a better understanding of the threat landscape and empowering business and consumer security, globally.

ESET Research Highlights:

Among our many successes are the research pieces pursued by our award-winning Malware and Threat Research team. Of note are:

  • The discovery of Operation Texonto, a Russian-aligned disinformation and PSYOPs operation targeting Ukrainian readers — including a Ukrainian defense provider and an EU agency
  • Identification of NGate malware that enables attackers to clone near-field communication data from victims’ physical payment cards to target banking customers
  • Examination of the actions of the Russian-aligned Gamaredon APT group and GoldenJackal cyber espionage group that are operating in Ukraine and conducting attacks across Europe
  • Research publication on RedLine Stealer’s backend modules as part of the joint investigation into the MaaS group’s activities with Dutch police, the FBI, and Eurojust in late 2024.

“In 2024, ESET deepened relationships with several significant government customers and added new partnerships, particularly in the field of cyber threat intelligence. The dividends show as we continue to work closely with law enforcement partners, including Europol, ENISA, and CISA, to help defend businesses, individuals, and societies,” said Roman Kovac, Chief Research Officer at ESET.

A great dividend of research on our ongoing product development efforts in 2024 was the introduction of two managed detection and response (MDR) services — one for SMBs and one for enterprises — while also securing several strategic partnerships. This investment contributed to double-digit revenue growth in the SMB and MSP spaces, as well as in the Enterprise segment.  This growth was also reflected by our sharpened strategies addressing the complex cybersecurity needs of large enterprises, critical infrastructure, and government institutions. This, too, can be seen in ESET Corporate Solutions’ accelerated delivery of tailored solutions for high-stakes environments.

Among the developed or expanded partnerships in 2024 were:

Progress. Protected.

In 2024, ESET continued to redefine what is possible in cybersecurity through cutting-edge research and development. At the heart of this innovation is our deep commitment to AI and machine learning — powering smarter, faster, and more adaptive threat detection systems. Through continuous collaboration with academia and relentless in-house innovation, ESET ensures that our AI-powered solutions not only meet today’s cybersecurity demands, but anticipate tomorrow’s.

Moving forward, ESET’s commitment to a cloud-first strategy, robust managed detection and response (MDR) capabilities, and AI-native prevention-first technologies remains central to its vision — ensuring resilience, adaptability, and leadership in an increasingly sophisticated threat landscape.

For further information about ESET’s successes in 2024, please read the full 2024 ESET Annual Report here.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

WAPPLES 連續第二年榮獲 2025 年國家服務獎

Penta Security 旗下 WAPPLES 慶祝 20 週年,並連續第二年榮獲國家服務大獎 

智慧型 WAAP 解決方案以其卓越的客戶滿意度和市場領導地位備受肯定,再次確立其在該獎項網絡安全類別中的唯一獲獎者地位。

Penta Security 的智慧型 WAAP(網站應用程式與 API 保護)解決方案 WAPPLES,再次於「2025 國家服務大獎」中獲得表彰,連續第二年榮獲「網絡安全解決方案」類別獎項。此項殊榮恰逢 WAPPLES 推出 20 週年,標誌著其在網站安全領域長達二十年的市場領導地位與創新歷程。

「國家服務大獎」旨在表彰獲得消費者卓越支持的機構,評選標準包括客戶滿意度、競爭優勢和服務管理等。「網絡安全」類別於 2024 年設立,WAPPLES 是該類別首屆且至今唯一的獲獎者。

自 2005 年推出以來,WAPPLES 已連續 17 年保持其在韓國市場排名第一的網站安全解決方案地位,並以其高偵測準確率和低誤報率而聞名。如今,它已是部署於全球 171 個國家的頂級 WAAP 解決方案,並作為 Cloudbric SECaaS 平台的核心引擎,保護著全球超過 70 萬個網絡業務。

Penta Security 的一位發言人表示:「在慶祝 WAPPLES 20 週年之際榮獲此獎項,對我們來說意義非凡。這印證了二十年來客戶對我們的信任,以及我們對創新的承諾。我們將繼續在此基礎上再接再厲,以提供最高水準的滿意度和安全性。」

關於 Penta Security

Penta Security 採取全方位的策略來涵蓋資訊安全的每個面向。本公司持續努力,透過廣泛的 IT 安全產品,在幕後確保客戶的安全。因此,Penta Security 總部位於韓國,並已在全球擴展,成為亞太地區的市佔領導者。

作為韓國最早進入資訊安全領域的公司之一,Penta Security 已經開發出廣泛的基礎技術。我們將科學、工程與管理相結合,擴展自身的技術能力,並以此技術視角做出關鍵決策。

關於Version 2

Version 2 Digital 是立足亞洲的增值代理商及IT開發者。公司在網絡安全、雲端、數據保護、終端設備、基礎設施、系統監控、存儲、網絡管理、商業生產力和通信產品等各個領域代理發展各種 IT 產品。透過公司龐大的網絡、通路、銷售點、分銷商及合作夥伴,Version 2 提供廣被市場讚賞的產品及服務。Version 2 的銷售網絡包括台灣、香港、澳門、中國大陸、新加坡、馬來西亞等各亞太地區,客戶來自各行各業,包括全球 1000 大跨國企業、上市公司、公用事業、醫療、金融、教育機構、政府部門、無數成功的中小企及來自亞洲各城市的消費市場客戶。

How to lock apps on an iPhone

What’s the difference between locking and hiding an app?

The difference between locking and hiding an app is that locking leaves the icon in view but guards its contents behind Face ID, Touch ID, or a passcode, whereas hiding removes the icon altogether and places the app itself into a hidden folder protected by Face ID.

You can think of locking as putting a digital padlock on an icon that’s still visible on your home screen. Tap the icon, look at the phone, and Face ID authorizes you. Anyone who picks up your phone can see the app is installed — they just can’t access its content without your face, your fingerprint, or your device passcode.

Hiding goes one step farther — the icon disappears from the home screen, from Spotlight search, and even from the app library. The app moves to a new, Face ID-protected “Hidden” folder. In other words, locking keeps data private, while hiding keeps the entire app out of sight unless you know exactly where to look.

How to lock an app on your iPhone

  1. Touch and hold the app icon until the quick-actions menu appears.

  2. Tap “Require Face ID.” (On older hardware, the wording might differ: “Require Touch ID” or “Require passcode.”)

  3. Authenticate once. From now on, every tap brings up Face ID.

Opening a locked app

Tap the icon and look at the screen. If Stolen Device Protection is turned on and you are away from a familiar location, Face ID is mandatory — your passcode will not unlock the app.

Removing the lock

Touch and hold the icon again, choose “Don’t require Face ID,” authenticate, and the padlock disappears.

How to hide an app on your iPhone

  1. Long-press the icon, choose “Require Face ID,” and authenticate.

  2. Long-press once more, select “Hide app,” and authenticate again. The icon vanishes immediately, and the app moves to the “Hidden” folder at the bottom of the App Library.

Opening a hidden app

Swipe down on the “Home screen,” type the app’s name, select the result labelled “Hidden,” then pass the biometric prompt. The app opens but remains invisible to everyone else.

Unhiding an app

Open the “Hidden” folder, touch and hold the app, pick “Unhide,” authenticate, and the icon returns to its previous home screen spot.

 

How can you lock apps on earlier iOS versions?

If your iPhone is still on iOS 17 or below, you cannot apply the new “Lock” or “Hide” commands, but you can mimic the same protection with three built-in tools. The steps below are detailed so you can follow them without guessing.

Screen time

  1. Open “Settings” and select “Screen time.”

  2. Tap “Turn on screen time” if it is off.

  3. Choose “Use screen time passcode,” set a four-digit code, and (if offered) link it to Face ID for easier entry.

  4. Tap “App limits” and select “Add limit.”

  5. Expand a category to reveal individual apps, select the one you want to lock, and tap “Next.”

  6. Set the timer to 1 minute, then enable “Block at end of limit.”

  7. Exit “Settings.”

Guided access

  1. Navigate to “Settings” and select “Accessibility.”

  2. Tap “Guided access” and switch it on.

  3. Tap “Passcode settings” and choose “Set guided access passcode.” Select a six-digit code, and enable Face ID or Touch ID if you prefer biometrics.

  4. Open the app you plan to lock, then triple-click the side (or home) button.

  5. If the overlay appears, simply tap “Start.”

  6. To leave the pinned session, triple-click again, enter the passcode or use Face ID, and tap “End.”

Shortcuts automation

  1. Open “Shortcuts,” and go to the “Automation” tab.

  2. Tap “+,” then “Create personal automation.”

  3. Scroll down, choose “App,” and tap “Choose.”

  4. Select the target app, confirm “Is opened,” and choose “Next.”

  5. Tap “Add action,” search for “Ask for input,” and set the prompt text to “Enter passphrase.” For “Input type”, pick “Number” or “Text.”

Tips to keep apps and data secure

Relying solely on a new lock icon is insufficient. Activate Face ID or Touch ID inside every banking, health, or mail app that supports internal biometric gates. In “Notification settings,” set “Show previews” to “Never” so message content is not exposed on the lock screen. Replace six numeric digits with a longer alphanumeric device passcode. Finally, relocate every password, passkey, or credit card detail to an encrypted vault such as NordPass password manager.

Why NordPass is the essential add-on

A locked or hidden app keeps strangers from launching it, but the credentials inside can still leak in a data breach. NordPass solves that problem by encrypting every password locally before syncing. After a single Face ID check, NordPass autofills your login with a 30-character password — no need to reuse or remember anything. Passkeys created on a Mac land on your iPhone in seconds. Secure Notes protect passport numbers or alarm PINs, and the built-in Breach Scanner alerts you if any saved email address appears in a public leak. Explore the full feature list and discover what NordPass brings to the table.

About NordPass
NordPass is developed by Nord Security, a company leading the global market of cybersecurity products.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.