In a piece for TechRepublic, IBM Security's Caleb Barlow explains why organizations must stop using personally identifiable information as a form of access. The sensitive information of billions of people around the world has been hacked in recent years, meaning immutable data — information that people can't change, such as their Social Security number, date of birth, or mother's maiden name — can be exploited by hackers to access another user's account. "We have to stop using things that can't change as forms of access," he said. "Unfortunately, we've all been doing that for the last decade, and now that most of this information is out there, 2018 will be the year that we really have to change our tune." Alternative access solutions, he pointed out, could leverage blockchain, two-factor authentication and biometrics. 
Full Story