Duo's Security Blog

MARCH 30, 2023

In our last Universal Prompt blog we focused on a few of the security benefits that using it provides. In this blog we’ll get into more of the user experience benefits. Improved User Experience – The Universal Prompt is a major redesign with new styling and a workflow-based authentication experience.

Authentication 53

Authentication Software Risk VPN 53

Duo's Security Blog

JANUARY 18, 2021

Securing the cloud was once a barrier to entry, but MFA (multi-factor authentication) has paved the way for an easy and effective way to secure remote and cloud access. Duo’s data shows a 60% increase in authentications to VPN and RDP applications to further secure sensitive data. See the video at the blog post.

Authentication 40

Authentication VPN Mobile Cybersecurity 40

Security Affairs

AUGUST 6, 2020

A new company has been added to the list of the victims of the Netwalker ransomware operators, it is Forsee Power , which provides advanced lithium-ion battery systems for any mobility application. Consider installing and using a VPN. Use two-factor authentication with strong passwords.

Ransomware 107

Ransomware VPN Advertising Marketing 107

McAfee

JANUARY 28, 2020

If they can tie that to your email address, and another service obtains your zip-code and a third service asks for your mobile number, you can see that anyone collating that information could have enough to try to steal your identity. Think twice about mobile apps and their data collection. Enable multi-factor authentication.

Passwords 71

Passwords Mobile Identity Theft VPN 71

Centraleyes

FEBRUARY 25, 2024

This blog aims to dissect the nuances of cloud security risks , shedding light on the challenges commonly faced when securing digital assets in the cloud. This revelation underscored the importance of transparency in cloud security, emphasizing the need for robust measures to secure cloud authentication.

Risk 52

Risk Encryption Social Engineering Authentication 52

Thales Cloud Protection & Licensing

NOVEMBER 22, 2017

In addition, the increasing speed of technology innovation has lead to a broader diversity of payment methods in recent years with new platforms for mobile payments continuing to be deployed. Enable multi-factor authentication – more and more online services and apps require multi-factor authentication. Happy (and safe!)

Risk 90

Risk Retail Digital transformation Authentication 90

McAfee

MAY 10, 2021

Protecting laptops and mobile devices for travel become extra important when using public, airport, and public Wi-Fi, as those networks can expose people to more threats than their home networks. . Look into using a virtual private network (VPN). and on top of the latest consumer and mobile security threats, follow?

Internet 108

Internet Internet Banking VPN 108

Duo's Security Blog

NOVEMBER 17, 2021

According to ZDNet , Remote Desktop Protocol (RDP) is the number one exploit that threat actors leverage to gain access to Windows computers and install ransomware and other malware, followed by email phishing and VPN bug exploits. The modern workforce is more mobile than ever before.

Ransomware 52

Ransomware Education VPN Authentication 52

The Last Watchdog

SEPTEMBER 6, 2023

These wallets are available in a variety of formats, including hardware wallets, online wallets, mobile wallets, and desktop wallets. Also, whenever it is possible, activate two-factor authentication (2FA). A virtual private network (VPN) can offer an additional layer of encryption and security. Select a reliable wallet.

Cryptocurrency 100

Cryptocurrency Backups Passwords Software 100

Webroot

JUNE 13, 2022

Use a password generator , enable two-factor authentication (2FA) as much as possible and don’t reuse passwords from multiple logins. Enable a Virtual Private Network (VPN) : Protect your connection and location from malicious hackers, targeted ads and others who try to spy and track your every move online.

Education 127

Education Passwords VPN Risk 127

Duo's Security Blog

APRIL 20, 2023

A major leading research and teaching institution, the University was looking for a multi-factor authentication (MFA) solution that could integrate with existing IT architecture and be rolled out easily across campus. Duo’s enrollment and authentication processes made it easy for even the most anti-tech users to get up and running with MFA.

Phishing 77

Phishing Social Engineering Authentication Engineering 77

CyberSecurity Insiders

NOVEMBER 4, 2021

This blog was written by an independent guest blogger. In perimeter-based models, the system will trust user credentials if they are, say, logged in to the corporate VPN or if they are using a pre-registered device. The zero trust approach still authenticates users based on passwords, among other traditional security procedures.

Retail 111

Retail eCommerce Cyber Attacks Authentication 111

Thales Cloud Protection & Licensing

NOVEMBER 6, 2019

In a previous blog post ( [link] ) we explored the relationship between GPDR and applications in the cloud. In other words, users were accessing company data either physically on site, or through a dedicated network or VPN. For instance, is the app being accessed from a mobile device, a personal tablet or a company issued computer?

Identity Theft 109

Identity Theft Authentication Passwords Accountability 109

Duo's Security Blog

JANUARY 11, 2024

Secure Cisco VPN logins in less than an hour Authenticate users in seconds Verify user + device posture Blog unmanaged devices Mitigate modern security threats with phishing-resistant authentication Join the thousands of Cisco firewall customers who take advantage of protecting Cisco VPN logins with Cisco Duo Single Sign-On via SAML 2.0

VPN 88

VPN Authentication Firewall Risk 88

SiteLock

AUGUST 27, 2021

Public WiFi is convenient for the traveling mobile device user, but also notoriously dangerous. Use only WiFi with proper authentication and encryption methods, or purchase a cellular data plan from your carrier while traveling. Use an encrypted VPN service. Visit the our blog for more security tips ! Avoid insecure WiFi.

Encryption 52

Encryption VPN Wireless Retail 52

Malwarebytes

SEPTEMBER 21, 2021

Enable multi-factor authentication (MFA). Multi-factor authentication is a great step to add in on every service that offers it. This could be a one-time login code sent via text, a code on an authenticator app, or a push notification, among others. For mobile devices, this could either be a PIN or a pattern.

Internet 103

Internet Internet Passwords Password Management 103

Fox IT

FEBRUARY 22, 2023

The “ZK” Framework is an opensource Java framework for building enterprise web and mobile applications. This blog will describe the malicious driver that was deployed by leveraging the vulnerability and how to check if your systems are affected. If enough new data comes in a follow-up blog will be considered.

Backups 69

Backups Software Authentication Internet 69

Krebs on Security

MARCH 23, 2022

In a blog post published Mar. For a fee, the willing accomplice must provide their credentials and approve the MFA prompt or have the user install AnyDesk or other remote management software on a corporate workstation allowing the actor to take control of an authenticated system. ” LAPSUS$ leader Oklaqq a.k.a.

Social Engineering 288

Social Engineering Accountability Mobile Passwords 288

Thales Cloud Protection & Licensing

OCTOBER 24, 2019

Help telecommuting employees : Given the rise of mobile and the cloud, organizations would do themselves a great disservice if they exclude telecommuting employees from their security training programs. That includes setting up a VPN through which remote employees can access work assets. Implement Multi-Factor Authentication.

Security Awareness 83

Security Awareness InfoSec Passwords Accountability 83

Thales Cloud Protection & Licensing

MAY 13, 2024

Multi-Factor Authentication: the mandatory first step for organizations moving to the cloud. But there is one simple solution to drastically reduce the risk of account take-over: enable Multi-Factor Authentication. Even the one without mobile phones? How to secure access from all my devices?

Authentication 62

Authentication Phishing Marketing Cloud Migration 62

Krebs on Security

FEBRUARY 18, 2019

webmail.finance.gov.lb), which allowed them to decrypt the intercepted email and VPN credentials and view them in plain text. 25, 2019, when security firm CrowdStrike published a blog post listing virtually every Internet address known to be (ab)used by the espionage campaign to date. That changed on Jan.

DNS 267

DNS Internet Internet Government 267

Krebs on Security

APRIL 6, 2022

Microsoft blogged about its attack at the hands of LAPSUS$, and about the group targeting its customers. “They would just keep jamming a few individuals to get [remote] access, read some onboarding documents, enroll a new 2FA [two-factor authentication method] and exfiltrate code or secrets, like a smash-and-grab,” the CXO said.

Social Engineering 243

Social Engineering Phishing Engineering Accountability 243

Kali Linux

NOVEMBER 27, 2022

In Secure Kali Pi (2022) , the first blog post in the Raspberry Pi series, we set up a Raspberry Pi 4 with full disk encryption. If you are only interested in using the Raspberry Pi as a Wi-Fi client, you can stop here, and unmount everything like we did in our secure Kali Pi blog post. hcd usr/lib/firmware/brcm/BCM-0bb4-0306.hcd

Firmware 52

Firmware Wireless Passwords VPN 52

Duo's Security Blog

JANUARY 27, 2022

Not all multi-factor authentication (MFA) solutions are equal. For a two-factor authentication solution, that may include hidden costs, such as upfront, capital, licensing, support, maintenance, and operating costs. Estimate and plan for how much it will cost to deploy multi-factor authentication to all of your apps and users.

Authentication 87

Authentication Software Mobile Passwords 87

Krebs on Security

OCTOBER 21, 2019

Antivirus and security giant Avast and virtual private networking (VPN) software provider NordVPN each today disclosed months-long network intrusions that — while otherwise unrelated — shared a common cause: Forgotten or unknown user accounts that granted remote access to internal systems with little more than a password.

Accountability 131

Accountability VPN Software Antivirus 131

NopSec

JULY 18, 2017

With that in mind, in this blog post we’re covering 13 out of the 20 controls. CSC12 – Boundary Defense How Unified VRM Helps: Port scanning, fingerprinting as well as VPN connections vulnerability identification are all steps performed in a vulnerability scans, both embedded and as a import.

Wireless 40

Wireless Penetration Testing Software Authentication 40

Cisco Security

MARCH 27, 2021

Read more about DoH in this blog by my colleague Nancy Cam-Winget. But unlike enterprise cloud services, which authenticate users before letting them in, DoH doesn’t have a gatekeeper. In this blog I’ll explain the need and how we see it working. The difference: with VPNs, most enterprise traffic goes through a single tunnel.

DNS 112

DNS VPN Advertising Encryption 112

Duo's Security Blog

SEPTEMBER 4, 2023

These days, users connect to company resources through a variety of endpoints: desktops, laptops, mobile phones, tablets, wearables…the list goes on. Passkey private keys are typically protected by a hardware secure module, like iOS’ Secure Enclave, and must be present on the device to authenticate. That’s where passkeys come in.

Passwords 63

Passwords Authentication Accountability Password Management 63

Security Boulevard

JANUARY 28, 2022

Long story short it's an OTR and OpenPGP-based communication protocol that actually has a lot of new improvements in terms of privacy and security including interoperability between multiple IM clients and mobile applications courtesy of different vendors. Protocol Introduction. What exactly is OMEMO? ChatSecure. Conversations.

Encryption 105

Encryption Cybercrime Social Engineering Mobile 105

Duo's Security Blog

AUGUST 1, 2022

focuses on developing stronger authentication requirements around NIST Zero Trust Architecture guidelines. now mandates that multi-factor authentication (MFA) must be used for all accounts that have access to the cardholder data, not just administrators accessing the cardholder data environment (CDE). DarkReading reports PCI DSS 4.0

Authentication 97

Authentication Passwords Accountability VPN 97

Troy Hunt

NOVEMBER 14, 2018

2FA, MFA, 2-Step They may all be familiar, but there are important differences that warrant explanation and we'll start with the acronym we most commonly see: 2FA is two-factor authentication. MFA is multi-factor authentication. 2-Step authentication does not necessarily require 2 discrete factors. It's a subset of MFA.

Passwords 261

Passwords Authentication Accountability Mobile 261

Duo's Security Blog

MARCH 18, 2022

We recently explored in the blog the National Cyber Security Center’s (NCSC) newly revised Cyber Essentials scheme , and how its specific post-pandemic “Bring Your Own Device” policies have led to some publications labeling the change “BYOD 2.0.” You can learn more about this topic in Duo’s Two-Factor Authentication Evaluation Guide.

Authentication 96

Authentication Mobile VPN Risk 96

Duo's Security Blog

DECEMBER 7, 2021

Passwordless is a sea change in authentication. Passwordless authentication provides the rare opportunity to increase our access security drastically while simultaneously improving the user experience — a compelling prospect! See the video at the blog post. Users can also enroll multiple passwordless authenticators.

Authentication 97

Authentication Technology VPN Mobile 97

BH Consulting

JUNE 20, 2023

One may know what the term VPN means, but what about when a VPN should be used and more importantly – not used, and what are the risks of using a VPN versus the benefits. For the purpose of this blog – we are going to use the term information security to mean both cyber and information security.

Cybersecurity 52

Cybersecurity Information Security VPN Authentication 52

Duo's Security Blog

MAY 5, 2022

Cumbersome password and authentication processes lead to poor user experiences and potential cyberthreats, putting the business and its people at risk. To create a more secure and convenient future, authentication must become passwordless.

Passwords 95

Passwords Password Management Authentication Risk 95

Security Boulevard

APRIL 16, 2021

This blog post was originally created by Jeremy Rasmussan, Chief Technology Officer at Abacode. Read the original blog here. . RDP client software is available for most flavors of Windows (including Windows Mobile), Linux, Unix, macOS, iOS, Android, and other operating systems. Enable Network Level Authentication (NLA).

Firewall 71

Firewall Passwords Authentication Accountability 71

Duo's Security Blog

NOVEMBER 30, 2022

Supporting OIDC allows us to protect more of the applications that our customers are adopting as we all move towards a mobile-first world and integrate stronger and modern authentication methods (e.g. protocol adding Authentication to what has historically been used for Authorization purposes. biometrics). What is OIDC?

B2C 99

B2C B2B Authentication Mobile 99