By DEBORAH PANSHAK
In an era where organizations spend fortunes on cutting-edge cybersecurity infrastructure, the greatest digital threat isn’t a complex, Hollywood-style hacking plot.
Instead, it is the invisible vulnerability of everyday human habits. A single password scribbled on a sticky note or an employee reusing a login across multiple platforms can render the most expensive firewall entirely useless.
To combat this, the corporate world requires a shift from reactive defense to practical, grounded solutions. Below, cyber security expert Jordan Nicholas breaks down the “credential crisis” facing modern businesses and shares actionable strategies to secure the ultimate point of failure: the point of access.
Here him:
Tech specialist focused on providing practical solutions to companies dealing with cyber security
The greatest cyber security threat facing companies today is not necessarily the complex hacking attacks but rather poor passwords, ignored warnings, and simple mistakes that manage to bypass all the high-tech security barriers.
This is where Jordan Nicholas comes in.
| “Protect the password, protect the system — security starts at the point of access.”
IN THE CURRENT environment, cybercriminals do not just target systems; they target the habits, Passwords scribbled on sticky notes, Login links accessed without a second thought. Credentials used a cross multiple platforms. This is what results in millions of losses each year.
Jordan Nicholas, a cybersecurity expert with vast experience in enterprise security, sheds light on this issue, According to Nicholas, vulnerabilities linked to credentials are still the most powerful and most exploited methods in the toolkit of modern attackers.
“While companies may be prepared for sophisticated attacks, the fact is that it is the simple things – such as credential management – which create the most problems,” says Nicholas.
“Attackers think logically. They choose the easy way out. And the easiest way out is always through a password,”
The credential crisis
The expert highlights a disturbing pattern: despite the increasing amounts of money pumped into cybersecurity infrastructures, many companies continue to be vulnerable because of entirely avoidable issues.
Compromised credentials, repeated passwords, and absence of visibility over account acess points constitute the main channels through which attackers operate.
Underlying many of the cyberattacks that have caused the most havoc in recent years is one mundane problem: credentials. According to the 2024 Verizon Data Breach Investigations Report, stolen credentials were a factor almost half of all breaches around the world — a number that has prove remarkably consistent year after year.
As Nicholas observes, there are four common failure scenarios that reocur time and again in his experience:
1. Weak or easy-to-guess passwords
2. Lack of centralized credential management Poor visibility of who can log into what system.
3. Lack of timely detection of unauthorized logins that enable attacks to proceed undetected for days or even weeks
“None of these vulnerabilities are new,” says Nicholas. “They are persistent because they are low-hanging fruit. An attacker who has a stolen password does not need to write a single line of code, They just login.”
From reactive to resilient
According to Nicholas, there is a need for a paradigm shift in the way organizations deal with cyber security threats, starting from the traditional reactive response model to a more proactive approach by focusing on behavior.
He notes four areas of practical importance:
1. Securing access control measures
2. Deploying real-time log activities monitoring to identify any anomaly before it escalates
3. Encouraging secure password usage habits in the organization.
4. Integrating security in to operations so that it runs as part of the operations process
“Cybersecurity has to be operational,” he says. “It has to be something that works seamlessly as part of how organizations operate, not something added on as an afterthought to projects.”
Innovation in focus:MyVault
One such development that represents this concept is MyVault, an independent password manager created by Nicholas that aims at increasing credential security while minimizing any hassle for the user.
MyVault uses AES-128 Fernet encryption along with key derivation using PBKDF2 algorithm and allows users to keep all credentials in an encrypted vault locally, without a account or internet connectivity.
This results in no more password re-use, centralized access, and increased visibility, and the best part is that it is available for free as open-source software.
This tool has already been recognized by many organizations for its practical approach towards achieving improved security without any expensive enterprise-level identity management systems.
Experience in action
Nicholas has practical enterprise security expertise which comes to play when designing all this tools. The majority of Nicholas’s professional experience is geared towards advancing threat detection among distributed workforces, increasing resilience in the systems, and improving incident response skills among organizations.
Having worked for multiple industries, including one of the biggest operating firms in Nigeria, had employed endpoint security measures on thousands of devices, handled vulnerability cycles which remediated hundreds of vulnerabilities, and created identity protection mechanisms that minimized credential-related issues.
Driving awareness and education
Besides tool building, Nicholas has been involved in raising cybersecurity awareness through various forms of education such as webinars and training sessions for professionals. His programs have covered a wide range of professionals from different industries by converting security ideas into actionable measures.
“It’s not just about technology,” he says. “Individuals need to be aware of the dangers for them to protect themselves from them. The most sophisticated system can be rendered useless if a single employee does not know what phishing emails look like.”
Final word
Considering increasing complexity and magnitude of cyber-attacks, there is one thing that remains certain: good cybersecurity is rooted in sound basics. Firewalls, detection mechanisms, encryption technologies — none of these will work without human behavior as their cornerstone.
From securing credentials and user awareness to encryption vaults and real-time threat detection, Nicholas proves that cybersecurity is not something that can only be afforded by big businesses.
Instead, it is an operational requirement and with the help of proper tools, it is attainable by anyone.
In the environment where just one password is all it takes to destroy everything an organization has worked for years to create, the need for sound basics could not be more evident.