Duo's Security Blog

FEBRUARY 13, 2024

WebAuthn Public Key Cryptography allows a merchant or customer to send a 'secret' encrypted message using a public key and only the owner of that public key can decrypt it with their private key. Then, at authentication time, the user’s device must be known or “trusted,” otherwise they are not be allowed to use it to authenticate.

eCommerce 63

eCommerce Authentication Encryption Passwords 63

Duo's Security Blog

SEPTEMBER 13, 2023

With this release, many high security and low friction authentication methods were made available. It is what allows you to connect to your bank online over secure hypertext transport protocol (https) and be confident your financial information will be encrypted. How do users enroll? What makes these methods so secure?

Authentication 54

Authentication Encryption eCommerce Phishing 54

Thales Cloud Protection & Licensing

JULY 3, 2019

With details from our report, I also highlighted how demand for modernization, mobile payments, IoT, cloud migration and cost savings is driving the push for new technologies while increasing opportunities for threats. They have to enforce these controls that are defined by them by encrypting the data.”.

Government 120

Government Cloud Migration IoT Encryption 120

Duo's Security Blog

SEPTEMBER 6, 2023

We have a lot of thoughts on passkeys – some of which we’ve shared in other posts in this passkey blog series – and today we’re going to explore how passkeys stack up against passwords from the perspective of cloud platforms. That’s why many tech companies are turning to passkeys as a more secure and convenient replacement.

Passwords 96

Passwords Password Management Authentication Threat Detection 96

Security Boulevard

FEBRUARY 21, 2024

Every time you send a mobile payment, search for airline flight prices, or book a restaurant reservation - you are using an API. In this blog, we will explain the unique data security challenges for Telcos and three ways how both Thales and Red Hat can help them protect against future API attacks.

Encryption 64

Encryption Mobile Government Consumer Protection 64

The Last Watchdog

APRIL 13, 2021

But what about the numerous machines on a company’s network, like mobile devices, servers, applications, and IoT devices? Machines are dramatically increasing, and require a solution that will identify these identities, authenticate them, and then secure their interactions across the network. Verify email. Know, trust, verify.

Authentication 191

Authentication Mobile Technology IoT 191

Security Boulevard

AUGUST 3, 2022

230 apps were leaking all four 0Auth authentication credentials and could be used to fully take over Twitter accounts to perform critical/sensitive actions. The Twitter API provides direct access to a Twitter account and OAuth tokens are used by the Twitter API for authentication. Twitter API. The vulnerability.

Mobile 98

Mobile Authentication Accountability Identity Theft 98

Thales Cloud Protection & Licensing

MARCH 6, 2020

Disconnecting from your mobile device, laptop or tablet can be as good as a holiday. Technology such as encryption will provide the last and most important layer of defense for data, rendering it useless if hackers break in. Secure encryption keys. But it’s also a chance to step back and re-evaluate our online usage.

Encryption 130

Encryption Authentication Passwords CISO 130

Centraleyes

FEBRUARY 25, 2024

This blog aims to dissect the nuances of cloud security risks , shedding light on the challenges commonly faced when securing digital assets in the cloud. Lack of Encryption Cloud computing involves data transmission over networks and storage in shared infrastructures. Who’s Responsible for Security in the Cloud?

Risk 52

Risk Encryption Social Engineering Authentication 52

Duo's Security Blog

DECEMBER 6, 2022

When someone is told that passwords are going away in favor of a new, “password-less” authentication method, a healthy dose of skepticism is not unwarranted. Passwordless authentication refers to a system that does not require the use of passwords at all. What is WebAuthn?

Architecture 93

Architecture Authentication Passwords Technology 93

Thales Cloud Protection & Licensing

JANUARY 28, 2020

Namely, they should implement encryption, key management and identity and access management (IAM) to help preserve the privacy of their stored data. Encryption. An organization’s digital security strategy would not be complete without encryption. Key Management. That’s the purpose of IAM. A Streamlined Data Security Strategy.

Data privacy 150

Data privacy Unstructured Data Encryption Identity Theft 150

Identity IQ

JULY 17, 2023

In this blog, we provide you with ten actionable ways to safeguard your digital identity, focusing specifically on how to prevent compromised credentials. Enable Two-Factor Authentication Utilize two-factor authentication (2FA) if it is available. How Can Your Credentials Become Compromised?

Identity Theft 52

Identity Theft Password Management Passwords Authentication 52

Identity IQ

JULY 17, 2023

In this blog, we provide you with ten actionable ways to safeguard your digital identity, focusing specifically on how to prevent compromised credentials. Enable Two-Factor Authentication Utilize two-factor authentication (2FA) if it is available. How Can Your Credentials Become Compromised?

Identity Theft 52

Identity Theft Password Management Passwords Authentication 52

Thales Cloud Protection & Licensing

MAY 31, 2021

In our previous blog post , we discussed the challenges for securing IoT deployments, and how businesses and consumers benefit from authenticating and validating IoT software and firmware updates. The most sensitive data, particularly the vehicle’s secret data and the user’s private data, should be encrypted using a robust algorithm.

IoT 71

IoT Computers and Electronics Manufacturing Firmware 71

CyberSecurity Insiders

JUNE 8, 2021

In this blog, I am joined by my colleague Pauline Pinzuti, Marketing Manager to discuss how the use of voice biometrics can help telecom operators fight ID fraud. What do mobile operations needs to know about telecom fraud? As a result, many have created extensive service portfolios, extending far beyond just mobile communications.

Authentication 102

Authentication Mobile Social Engineering Marketing 102

Malwarebytes

MAY 10, 2023

In a recent blog post , the tech giant introduced the option to create and use a safer, more convenient alternative to passwords: Passkeys , a form of digital credential. Passkeys are generated using public-key cryptography , or asymmetric encryption, which involves using a pair of public and private keys. So, how do they work?

Passwords 94

Passwords Accountability Phishing Mobile 94

Duo's Security Blog

NOVEMBER 2, 2023

By embracing the Duo Desktop app, along with our Duo Mobile app, organizations can confidently identify the device, the user and the context of the access request to fortify their cybersecurity posture across desktops and mobile devices.

Mobile 108

Mobile Antivirus Firewall Cybersecurity 108

Thales Cloud Protection & Licensing

JUNE 16, 2022

With cloud and mobile computing becoming the norm, identity-based and strong authentication are the crucial steps in advancing trust in the digital world. Humans, machines, and APIs should all be authenticated using this method based on their identities, purposes, and usage context.

Encryption 71

Encryption Artificial Intelligence Architecture Digital transformation 71

The Last Watchdog

SEPTEMBER 6, 2023

These wallets are available in a variety of formats, including hardware wallets, online wallets, mobile wallets, and desktop wallets. Also, whenever it is possible, activate two-factor authentication (2FA). Backups should be kept safely in several places, such as encrypted cloud storage or external hard drives.

Cryptocurrency 100

Cryptocurrency Backups Passwords Software 100

Security Boulevard

NOVEMBER 21, 2022

Private key encryption is also referred to as symmetric encryption, where the same private key is used for both encryption and decryption. In public key cryptography, the private key is used for encryption and digital signatures. Public key and private key pairs are also effective for authenticating machine identities.

Encryption 52

Encryption Cryptocurrency Authentication Software 52

CyberSecurity Insiders

JULY 6, 2021

In our previous blog on this topic, we looked into how a virtual network infrastructure, combined with the use of an unprecedented volume of data, and the introduction of the IoT on 5G networks, all posed a significant challenge to mobile operators in their desire to create secure 5G. Meeting Rising Customer Onboarding Expectations.

Mobile 101

Mobile Internet Internet IoT 101

McAfee

JANUARY 28, 2020

If they can tie that to your email address, and another service obtains your zip-code and a third service asks for your mobile number, you can see that anyone collating that information could have enough to try to steal your identity. Think twice about mobile apps and their data collection. Enable multi-factor authentication.

Passwords 71

Passwords Mobile Identity Theft VPN 71

Google Security

MAY 11, 2022

Posted by Daniel Margolis, Software Engineer, Google Account Security Team Every year, security technologies improve: browsers get better , encryption becomes ubiquitous on the Web , authentication becomes stronger. This blog will deep dive into the method of phishing and how it has evolved today.

Phishing 106

Phishing Scams Authentication Accountability 106

Duo's Security Blog

SEPTEMBER 21, 2021

No Extra Enrollment Steps When your users are already enrolled with Duo and have the Duo Mobile app installed, there are zero extra steps for them to take to verify their identities at the help desk with Specops Secure Service Desk. Do you need a secure process to verify users at the help desk? See how Secure Service Desk can help.

Passwords 86

Passwords Social Engineering Authentication Engineering 86

Thales Cloud Protection & Licensing

SEPTEMBER 6, 2018

In my recent blog on the evolving PCI SSC initiatives in 2018, “ Minor on PCI DSS, major on almost everything else ,” I outlined how the organisation is covering new areas to reflect the migration from physical card payments to online digital payments. The PCI specifications with strict HSM requirements.

Mobile 66

Mobile Software Encryption Risk 66

Thales Cloud Protection & Licensing

NOVEMBER 22, 2017

In addition, the increasing speed of technology innovation has lead to a broader diversity of payment methods in recent years with new platforms for mobile payments continuing to be deployed. The “S” stands for secure and is the guarantee that all communications between the browser and the website are encrypted. Happy (and safe!)

Risk 90

Risk Retail Digital transformation Authentication 90

Security Affairs

APRIL 20, 2019

The popular French white hat hacker Robert Baptiste (aka @fs0c131y) discovered how to break into Tchap , a new secure messaging app launched by the French government for encrypted communications between officials and politicians. So I did a Google search “email @ elysee.fr ”” wrote the expert in a blog post. or @elysee.fr

Government 100

Government Encryption Accountability Advertising 100

NetSpi Executives

OCTOBER 24, 2023

Passwords are stored in an encrypted database to ensure protection and when a user is logged into the password manager, credentials can be retrieved so unique passwords don’t need to be remembered for each individual account. Turn on Multifactor Authentication Even strong, secure passwords can be exposed by attackers.

Social Engineering 59

Social Engineering Engineering Cybersecurity Passwords 59

Security Boulevard

AUGUST 30, 2021

<a href='/blog?tag=Endpoint tag=Endpoint Protection'>Endpoint Protection</a> <a href='/blog?tag=Data tag=Data Loss Prevention'>Data Loss Prevention</a> <a href='/blog?tag=File tag=File Transfers'>File Transfers</a> <a href='/blog?tag=Advanced Additional Resources.

Social Engineering 101

Social Engineering Cybersecurity Unstructured Data Engineering 101

SecureList

AUGUST 15, 2022

Non-mobile statistics. Mobile statistics. While fileless malware is nothing new, the way the encrypted shellcode containing the malicious payload is embedded into Windows event logs is. You can find more details, including appropriate mitigation steps, in our blog post. IT threat evolution in Q2 2022. Targeted attacks.

Mobile 78

Mobile Ransomware Malware Encryption 78

ForAllSecure

MARCH 29, 2023

In the following sections, we will discuss: API Basics Common API Security Vulnerabilities Best Practices for API Security How to do API Security Automatically By the end of this blog post, you will have a good understanding of API security and the steps you can take to easily secure your APIs. API Basics: What Is an API and How Do APIs Work?

Authentication 40

Authentication Passwords Encryption Software 40

Thales Cloud Protection & Licensing

JULY 16, 2019

In many markets, this comes in the wider context that e-commerce – and mobile commerce in particular – are seeing rapid growth, but putting long-term aspirations at risk by continually disappointing customers with unstable on-boarding and checkout processes , or failing to assure customers they are processing their data securely.

Digital transformation 73

Digital transformation Retail Encryption Authentication 73

The Last Watchdog

SEPTEMBER 7, 2022

This gives the perpetrator the access needed to launch the ransomware and lock the company out of its own infrastructure or encrypt files until the ransom is paid in cryptocurrency. Bolster your monitoring and email authentication capabilities. Victims have two equally unattractive choices to resolve the situation. Incident response.

Ransomware 124

Ransomware Education Financial Services Phishing 124

Security Boulevard

MARCH 14, 2022

A third (33%) of respondents said they use three or more authentication access management tools. Machine identities validate the authenticity of non-human entities connected to corporate networks. Machine identities validate the authenticity of non-human entities connected to corporate networks. UTM Medium. UTM Source.

Cloud Migration 97

Cloud Migration Digital transformation Data breaches Authentication 97

The Last Watchdog

AUGUST 20, 2018

Multi-factor authentication (MFA) can also be used to provide an additional layer of protection. Encrypt your data. Finally, it is good practice to encrypt your data. Related: Getting Identity Access Management right. Ensure you have comprehensive backups.

Penetration Testing 159

Penetration Testing Passwords Backups Encryption 159

CyberSecurity Insiders

MARCH 16, 2021

In this blog, we focus on a few aspects which are essential to ensuring robust connectivity and security within connected vehicles including cellular connectivity, security-by-design, digital identity, regulation and lifecycle management. Why cellular?

Manufacturing 115

Manufacturing IoT Technology Cybersecurity 115

Zigrin Security

OCTOBER 11, 2023

For a detailed threat actor description do not forget to check out our blog article about selecting between black-box, white-box, and grey-box penetration tests and also you would know which pentest you need against a specific threat actor. Let’s have a look at the types of threat actors and what type of data they would like to obtain.

Cyber threats 52

Cyber threats Penetration Testing Passwords Backups 52