Passwords: Our First Line of Defense

This piece argues that organizations should adopt at least 15-character passwords, critiquing 8-character minimum recommendations from NIST and Microsoft. Drawing on penetration testing experience, it notes that password spraying frequently succeeds against common, predictable passwords and warns that weakly implemented 2FA can be bypassed, concluding with a promotion for a related webcast and training.