To defend against hospital-targeting threat actors, Errol Weiss, CSO at nonprofit information-sharing org Health-ISAC, sees promise in passwordless technologies like biometrics, hardware keys, and one-time tokens—which are still in the nascent stage, he said.
“So many of these ransomware attacks are enabled because somebody gave away their username and password in a phishing link,” Weiss told IT Brew. “And that’s really where it all starts. And so if we’re able to use this passwordless technology, that does not become the issue there; they are not able to phish a credential.”
