Duo's Security Blog

JUNE 12, 2023

Before we can discuss passkeys, we need to lay some groundwork and discuss authentication, Passwordless and WebAuthn. What is authentication? Authentication is the process of verifying your online identity. We added multi-factor authentication (MFA) – something you know and something you have or are.

Authentication 113

Authentication Passwords Password Management Phishing 113

Duo's Security Blog

OCTOBER 18, 2022

A password manager can go a long way in helping to simplify that process, but multi-factor authentication (MFA) security can help even more. Our experts will discuss the risks posed by passwords, what cyber insurers require to protect organizations, and how MFA can meet both of those needs.

Insurance 56

Insurance Passwords Cyber Insurance Authentication 56

Thales Cloud Protection & Licensing

MAY 17, 2023

What is Ransomware? Add Multi-factor Authentication Customers can add Multi-factor Authentication (MFA) for CipherTrust Encryption (CTE), to get an additional layer of protection at the folder/file level. Ransomware is a vicious type of malware that infects your laptop/desktop or server.

Ransomware 127

Ransomware Encryption Authentication System Administration 127

Duo's Security Blog

SEPTEMBER 16, 2021

At Duo, we're building a passwordless authentication solution that’s as easy to set up as it is to use – with our world-class security baked in. What is Passwordless, Anyway? But not every passwordless product or system meets the security high bar administrators need. Read about why MFA and passwordless are a powerful pair.

Authentication 91

Authentication Passwords Phishing CISO 91

Krebs on Security

DECEMBER 18, 2020

government cybersecurity agencies warned this week that the attackers behind the widespread hacking spree stemming from the compromise at network software firm SolarWinds used weaknesses in other, non-SolarWinds products to attack high-value targets. National Security Agency (NSA) warned on Dec. ” Indeed, the NSA’s Dec.

Software 355

Software Authentication Hacking Government 355

Security Boulevard

JULY 6, 2023

ForgeRock Autonomous Access uses AI to monitor login requests in real time, blocking malicious attempts and adding authentication steps when it detects anomalous behavior. What are distributed attack heuristics? A successful MFA means the user can continue to login and be productive.

Artificial Intelligence 103

Artificial Intelligence Passwords Authentication Accountability 103

Security Affairs

SEPTEMBER 12, 2022

Once obtained the credentials, the attackers launched voice phishing attacks in an attempt to trick the victim into accepting the MFA push notification started by the attacker. Upon achieving an MFA push acceptance, the attacker had access to the VPN in the context of the targeted user.

Ransomware 103

Ransomware VPN Authentication Phishing 103

Duo's Security Blog

JULY 21, 2023

If endless false positives and reactive security models have been threatening your productivity and that of your users, you’re not alone. Many organizations struggle with authentication processes that frustrate and burden users to the point that they see security as nothing but a point of friction.

Authentication 63

Authentication Risk Engineering Phishing 63

Malwarebytes

AUGUST 28, 2023

The Cisco Product Security Incident Response Team (PSIRT) has posted a blog about Akira ransomware targeting VPNs without Multi-Factor Authentication (MFA). The Cisco team states that it is aware of reports of the Akira ransomware group going specifically after Cisco VPNs that are not configured for MFA.

Ransomware 81

Ransomware VPN Passwords Backups 81

Duo's Security Blog

AUGUST 24, 2022

It can also be challenging for school leaders to break down what new laws mean and what they can do to support pre-existing academic compliance mandates to help secure student data. However, adding two-factor or multi-factor authentication (MFA) cybersecurity may be a good place to start.

Cybersecurity 52

Cybersecurity Education Insurance Authentication 52

Security Boulevard

DECEMBER 21, 2022

What happened in the Okta source code breach? Okta, a leading provider of authentication services and Identity and Access Management (IAM) solutions, confirmed that its private GitHub repositories were hacked this month. Review all executive accounts including MFA method changes. Identify Okta accounts where MFA was disabled.

Accountability 98

Accountability Architecture Authentication Internet 98

Malwarebytes

OCTOBER 4, 2023

The “version history” of the internet was split by what we could do online—simple browsing across Web 1.0’s But, as Malwarebytes has uncovered in new research, what we can do online produces its own, generational byproduct: Fear. ’s static web pages, instant connection throughout Web 2.0’s

Antivirus 126

Antivirus Identity Theft Internet Internet 126

CyberSecurity Insiders

OCTOBER 19, 2022

Some of those customer accounts have since gone dormant, while many others remain inadequately protected due to weak passwords or the absence of safeguards like multi-factor authentication (MFA). Beauty brands have long been masters at inspiring loyalty and enthusiasm for their products. Analytics, Forter.

Retail 119

Retail Accountability Authentication Cryptocurrency 119

eSecurity Planet

MARCH 21, 2022

Using misconfigured multi-factor authentication (MFA) and an unpatched Windows vulnerability, Russian state-sponsored hackers were able to breach a non-governmental organization (NGO) and escalate privileges, the Cybersecurity and Infrastructure Security Agency (CISA) and the FBI revealed last week.

VPN 103

VPN Accountability Authentication Passwords 103

CyberSecurity Insiders

APRIL 10, 2023

We spoke with our blog volunteers to get their insights into what best practices their companies are following, along with how you can get on a path to better identity management. Our in-house product of identity manager and access manager ensure that we are following standards. Tomorrow, April 11 is Identity Management Day.

Identity Theft 105

Identity Theft Education Authentication Data breaches 105

The Last Watchdog

APRIL 7, 2021

Passwordless authentication as a default parameter can’t arrive too soon. That’s the upshot of a new report, The State of Passwordless Security 2021 , put out by HYPR , a New York City-based supplier of advanced authentication systems. Related: Top execs call for facial recognition to be regulated. 1 use case is remote access.”.

Authentication 117

Authentication Digital transformation Passwords Password Management 117

The Last Watchdog

JANUARY 27, 2022

So what are some of the specific security risks and challenges that organizations face and best practices to help close the cybersecurity gap in each stage? Many attribute this steady growth to the increase in work-from-home models and adoption of cloud services since the beginning of the COVID-19 pandemic. Lack of documented evidence.

Marketing 233

Marketing Data privacy Risk Accountability 233

Duo's Security Blog

OCTOBER 18, 2021

These groups are having lots of discussion around the fact that many campuses are required to use multi-factor authentication (MFA) for their cyber liability insurance. MFA is core to implementing a zero trust stance to protect your campus. As part of National Cybersecurity Awareness Month and “Do Your Part.

Insurance 65

Insurance Education Risk Cyber Insurance 65

SecureWorld News

JANUARY 22, 2024

While Microsoft found no evidence yet of impacts on customers, production systems, or source code, the months of unauthorized access raises serious concerns. Microsoft is lucky this time, as apparently the gang was searching emails to see what Microsoft was saying about them.

Passwords 94

Passwords Accountability Backups Hacking 94

Cisco Security

NOVEMBER 9, 2021

And a zero trust approach to secure access across corporate resources and applications offers the needed security without impacting the user experience and workforce productivity. . The New Duo Authentication Experience . Our vision is to provide Zero Trust based secure access for the Hybrid Workforce. is helpful.

VPN 110

VPN Authentication Digital transformation Technology 110

NetSpi Technical

JANUARY 18, 2024

Time-Based One-Time Password (TOTP) Time-Based One-Time Password (TOTP) is a common two-factor authentication (2FA) mechanism used across the internet. During authentication, the secret is used in combination with the time in a cryptographic hash function to produce a secure 6-digit passcode. The credentials had been obtained.

Authentication 109

Authentication Passwords Accountability Penetration Testing 109

Malwarebytes

FEBRUARY 28, 2023

After this, the attacker was able to wait until the employee entered their master password and authenticated themselves with multi-factor authentication. What to do if you're a LastPass user At the moment, there is nothing you need to do if you have already followed the advice during the December breach reveal.

VPN 88

VPN Media Backups Passwords 88

Duo's Security Blog

DECEMBER 7, 2022

But what are the risks with this approach? Whether that’s the number of global incidents and overall cyberattacks, the amount of insurance claims, the pricing of cyber insurance products, the general rise in firms applying for policies — the only way is up. Of course, insurance cover is not the only measure that can be taken.

Insurance 75

Insurance Cyber Insurance Ransomware Risk 75

SecureWorld News

MARCH 1, 2023

You would expect the manufacturer to be held accountable for selling you a defective product that can harm you or others. But what about software products that are riddled with vulnerabilities that can compromise your data, privacy, and security? RELATED: What Are Security Guardrails? This situation is not sustainable.

Software 65

Software Cybersecurity Technology Data privacy 65

Duo's Security Blog

FEBRUARY 6, 2024

Addressing identity-based attacks Duo has made a number of significant investments in identity security over the last several years with the release of Duo’s Trust Monitor, Duo’s Risk-Based Authentication, and moving Duo’s Trusted Endpoints feature into Duo’s Essentials edition. The idea that “identity is the new perimeter” is not new.

Accountability 72

Accountability Authentication Risk Marketing 72

Thales Cloud Protection & Licensing

JULY 8, 2021

Hardware-based PKI provides strong passwordless authentication. In addition to the public key, certificates contain additional information, such as the issuer, what the key is supposed to be used for, and any other type of metadata. Certificate-based and software authentication solutions and OTP. Thu, 07/08/2021 - 08:40.

Authentication 71

Authentication Password Management Passwords Accountability 71

Thales Cloud Protection & Licensing

NOVEMBER 20, 2023

This jump is linked to the intricacies of managing multi-cloud operations. Incorporate personal security best practices, such as two-factor authentication and encryption, in all your online interactions. This is a critical lesson for retailers. Behind every system, software, and security protocol stands a human being.

Retail 83

Retail Cybersecurity Financial Services Mobile 83

Security Boulevard

MARCH 24, 2022

Lapsus$ has used tactics such as social engineering, SIM swapping, and paying employees and business partners for access to credentials and multifactor authentication approvals. What happened in the Okta attack? Review all executive accounts including MFA method changes. Re-enable MFA for those accounts.

Accountability 57

Accountability Authentication Passwords Social Engineering 57

Security Boulevard

JULY 19, 2023

What is security fatigue? MFA prompt bombing complacency Multi-factor authentication (MFA) is a common cybersecurity measure taken by companies, but it can also reveal a security fatigue issue. One of these ways is MFA prompt bombing. Companies can save an average of $2.66

Risk 75

Risk Cybersecurity Data breaches Authentication 75

Duo's Security Blog

SEPTEMBER 23, 2021

Today, weep not for the memories of what was, but rejoice because the answer will soon be, “Yes.” They wanted to ensure that security policies do not create user friction and negatively impact productivity. Now our user base finds Duo unobtrusive and we're able to comply with our MFA mandate without push back from users."

Authentication 62

Authentication Engineering Manufacturing Technology 62

The Last Watchdog

SEPTEMBER 26, 2022

Thanks to the emergence of today’s hybrid and multi-cloud environments and factors like remote work, ransomware attacks continue to permeate each industry. The third is identity – the validation that a requestor is who they say they are and has the ability and limitation to do only what they should. Dodhiawala.

Ransomware 179

Ransomware Passwords Data breaches Accountability 179

BH Consulting

AUGUST 9, 2022

To MFA or not to MFA, that is the question. Many professionals agree multi-factor authentication (MFA) can improve security, but a recent discovery showed that it’s no panacea either. Researchers from Microsoft identified a phishing campaign that bypasses MFA. That said, not all MFA is equal.”

Cybercrime 52

Cybercrime Accountability Phishing Authentication 52

SC Magazine

MAY 7, 2021

Google announced that it will automatically enroll users in multifactor authentication – what they are calling two-step verification. Using their mobile device to sign in gives people a safer and more secure authentication experience than passwords alone,” Risher said. Photo by Mario Tama/Getty Images).

Authentication 89

Authentication Passwords Password Management Mobile 89

Thales Cloud Protection & Licensing

AUGUST 15, 2022

FIDO - Leading the Zero Trust Passwordless Authentication Evolution. It has recently become a hot buzzword, but what is Zero Trust Security? A Zero Trust approach starts with Multi-Factor Authentication (MFA). The Role of Passwordless Authentication. Tue, 08/16/2022 - 06:32. Zero Trust Security.

Authentication 71

Authentication Phishing Passwords Risk 71

Thales Cloud Protection & Licensing

JANUARY 24, 2022

What is the correct way to do that? What is the correct way to do that? Merely suggesting using multi-factor authentication (MFA) or encrypting everywhere is not enough. This is what Data Privacy Week is about – building the foundations for a safer digital tomorrow. And here’s the tricky part.

Data privacy 127

Data privacy Data breaches Social Engineering Technology 127

Duo's Security Blog

JANUARY 8, 2024

While understanding these types of attacks can seem intimidating, it is important to know what an AiTM attack is and how it works to safeguard your users and your organization. What is an AiTM attack? Clicking the link routes the user to a proxy server which is typically identical to the authentic web page, except the URL.

Authentication 64

Authentication Phishing Passwords Encryption 64

Thales Cloud Protection & Licensing

DECEMBER 13, 2023

This blog post will explore the reasons that ransomware sanctions may fall short and what actions organizations can do to protect against ransomware. However, there are numerous factors that complicate circumstances and hinder the ability of sanctions to have a substantial impact on the ransomware threat landscape.

Ransomware 77

Ransomware Encryption Backups Accountability 77