Duo's Security Blog

SEPTEMBER 14, 2021

Adoption of two-factor authentication has substantially increased since we began conducting this research in 2017. SMS Text Message Remains the Most Used Authentication Method SMS (85%) continues to be the most common second factor that respondents with 2FA experience have used, slightly up from in 2019 (72%).

Password Management 92

Password Management Passwords Authentication Accountability 92

Malwarebytes

MAY 10, 2024

A cybercriminal called Menelik posted the following message on the “Breach Forums” site: “The data includes 49 million customer and other information of systems purchased from Dell between 2017-2024. Change your password. You can make a stolen password useless to thieves by changing it. Enable two-factor authentication (2FA).

Data breaches 136

Data breaches Passwords Phishing Big data 136

Malwarebytes

AUGUST 11, 2022

Slack, the workplace communication platform, has notified some of its users that their hashed passwords have been subject to exposure for the last five years. The flaw exposed hashed passwords of users when creating or revoking shared invitation links for workspaces. Hashed passwords could still be revered by brute force methods.

Passwords 63

Passwords Accountability Encryption Authentication 63

The Last Watchdog

AUGUST 29, 2022

•A whopping 80 percent were due to stolen credentials (nearly a 30 percent increase since 2017!). Brute forcing passwords (10 percent) came in third. Poor password practices are responsible for most incidents involving web applications and data breaches since 2009. Authentication bypass. Brute forcing passwords.

Hacking 201

Hacking Passwords Password Management Data breaches 201

Krebs on Security

FEBRUARY 26, 2023

million customers, including website administrator passwords, sFTP credentials, and private SSL keys; -December 2022: Hackers gained access to and installed malware on GoDaddy’s cPanel hosting servers that “intermittently redirected random customer websites to malicious sites.”

Hacking 268

Hacking Social Engineering Phishing Scams 268

Security Affairs

JULY 2, 2019

US Cyber Command posted on Twitter an alert about cyber attacks exploiting the CVE-2017-11774 vulnerability in Outlook. Yesterday I was using Twitter when I noticed the following alert issued by the account managed by the US Cyber Command : USCYBERCOM has discovered active malicious use of CVE-2017-11774 and recommends immediate #patching.

Energy and Utilities 82

Energy and Utilities Malware Advertising InfoSec 82

Security Affairs

DECEMBER 17, 2019

TP-Link has addressed a critical vulnerability impacting some TP-Link Archer routers that could allow attackers to login without passwords. ” The flaw could allow unauthorized third-party access to the router with admin privileges without proper authentication. .” ” continues the post. Pierluigi Paganini.

Passwords 94

Passwords Advertising Firmware Authentication 94

Krebs on Security

JULY 23, 2018

Google has not had any of its 85,000+ employees successfully phished on their work-related accounts since early 2017, when it began requiring all employees to use physical Security Keys in place of passwords and one-time codes, the company told KrebsOnSecurity. A YubiKey Security Key made by Yubico. a mobile device). a mobile device).

Phishing 224

Phishing Authentication Mobile Passwords 224

Krebs on Security

AUGUST 25, 2023

Countless websites and online services use SMS text messages for both password resets and multi-factor authentication. Many online services allow users to reset their passwords just by clicking a link sent via SMS , and this unfortunately widespread practice has turned mobile phone numbers into de facto identity documents.

Mobile 198

Mobile Cyber Risk Cryptocurrency Data breaches 198

Krebs on Security

JULY 10, 2022

In both cases the readers used password managers to select strong, unique passwords for their Experian accounts. Turner said he created the account at Experian in 2020 to place a security freeze on his credit file, and that he used a password manager to select and store a strong, unique password for his Experian account.

Accountability 315

Accountability Passwords Authentication Password Management 315

Krebs on Security

AUGUST 27, 2019

Imperva , a leading provider of Internet firewall services that help Web sites block malicious cyberattacks, alerted customers on Tuesday that a recent data breach exposed email addresses, scrambled passwords, API keys and SSL certificates for a subset of its firewall users. Redwood Shores, Calif.-based

Cybersecurity 245

Cybersecurity Firewall Passwords Data breaches 245

Security Affairs

OCTOBER 17, 2023

The group is also the author of the NotPetya ransomware that hit hundreds of companies worldwide in June 2017. ’ The CERT-UA also reported that the state-sponsored hackers used compromised VPN accounts that weren’t protected by multi-factor authentication. “Note (!)

Telecommunications 106

Telecommunications Authentication Data collection Passwords 106

Krebs on Security

APRIL 11, 2019

Google this week made it easier for Android users to enable strong 2-factor authentication (2FA) when logging into Google’s various services. and higher can now be used as Security Keys , an additional authentication layer that helps thwart phishing sites and password theft. a one-time token, key fob or mobile device).

Mobile 235

Mobile Authentication Passwords Accountability 235

CyberSecurity Insiders

NOVEMBER 30, 2021

Named as The Enterprise Mobility Management (EMM) the security guide offers steps for device management, app security, authentication, network security and ways to secure an enterprise related mobile devices from existing threats.

Mobile 129

Mobile Authentication Phishing Passwords 129

Krebs on Security

AUGUST 17, 2023

The international police organization INTERPOL said last week it had shuttered the notorious 16Shop, a popular phishing-as-a-service platform launched in 2017 that made it simple for even complete novices to conduct complex and convincing phishing scams. A 16Shop phishing page spoofing Apple and targeting Japanese users. Image: Akamai.com.

Phishing 192

Phishing Passwords Internet Internet 192

Krebs on Security

APRIL 9, 2024

“This is the largest release from Microsoft this year and the largest since at least 2017,” said Dustin Childs , from Trend Micro’s Zero Day Initiative (ZDI). “As far as I can tell, it’s the largest Patch Tuesday release from Microsoft of all time.”

DNS 241

DNS Social Engineering Malware Media 241

CyberSecurity Insiders

OCTOBER 31, 2022

This includes social security numbers, email addresses and passwords to access the services on the application. Such practices in-turn led to 4 security breaches since 2017 and so the company was asked to revamp its security practices while collecting and storing data with authentication and biometrics that need to be followed by the staff.

Cybersecurity 120

Cybersecurity Consumer Protection Education Authentication 120

Security Affairs

JUNE 8, 2022

“Upon gaining an initial foothold into a telecommunications organization or network service provider, PRC state-sponsored cyber actors have identified critical users and infrastructure including systems critical to maintaining the security of authentication, authorization, and accounting. Enforce MFA on all VPN connections [ D3-MFA ].

Telecommunications 95

Telecommunications Authentication Passwords Accountability 95

Krebs on Security

MARCH 8, 2019

In the wake of Equifax’s epic 2017 data breach impacting some 148 million Americans, many people did freeze their credit files at the big three in response. The portal asked me for an email address and suggested a longish, randomized password, which I accepted. Consumers in every U.S. Getting an account at myequifax.com was easy.

Accountability 268

Accountability Identity Theft Authentication Passwords 268

The Last Watchdog

AUGUST 18, 2021

billion in 2017; Avast acquired AVG for $1.3 There are simple steps consumers can take today, for free, to lower their overall risk of a cyber attack, including using multi-factor authentication for their accounts and using strong passwords. A lot of water has flowed under the bridge since then. billion in 2016, for instance.

Antivirus 223

Antivirus Marketing Identity Theft Social Engineering 223

Troy Hunt

JANUARY 8, 2019

Very often, those addresses are accompanied by other personal information such as passwords. No, and the passwords are the very first thing that starts to give it all away. The attack is simple but effective due to the prevalence of password reuse. Clearly a Spotify breach, right? Billions of them, in some cases.

Hacking 224

Hacking Passwords Accountability Data breaches 224

Krebs on Security

AUGUST 16, 2018

Unauthorized SIM swaps often are perpetrated by fraudsters who have already stolen or phished a target’s password, as many banks and online services rely on text messages to send users a one-time code that needs to be entered in addition to a password for online authentication. On June 11, 2017, Terpin’s phone went dead.

Mobile 229

Mobile Cryptocurrency Accountability Authentication 229

Security Affairs

JANUARY 19, 2020

This is the biggest leak of Telnet passwords even reported. The list includes the IP address, username and password for the Telnet service for each device. The list appears to be the result of an Internet scan for devices using default credentials or easy-to-guess passwords. ” reported ZDNet. ” reported ZDNet.

IoT 88

IoT DDOS InfoSec Internet 88

Elie

NOVEMBER 9, 2017

Over the course of March, 2016–March, 2017, we identify 788,000 potential victims of off-theshelf keyloggers; 12.4 billion usernames and passwords exposed via data breaches and traded on blackmarket forums. Drawing upon Google as a case study, we find 7–25% of exposed passwords match a victim’s Google account.

Data breaches 112

Data breaches Phishing Risk Malware 112

Krebs on Security

MARCH 10, 2020

District Court for the Southern District of California allege Firsov was the administrator of deer.io, an online platform that hosted more than 24,000 shops for selling stolen and/or hacked usernames and passwords for a variety of top online destinations. An example seller’s panel at deer.io. Click image to enlarge.

Accountability 298

Accountability Advertising Hacking Cybercrime 298

Malwarebytes

MAY 7, 2021

As recently as 2017, a tiny amount of GMail users made use of its two-step options. The password problem. Questions how this will work aside, Google continues to keep plugging away at the eternally relevant password problem. Their password import feature allows people to save passwords as a CSV file , then port it into Chrome.

Passwords 98

Passwords Password Management Backups Accountability 98

Krebs on Security

AUGUST 12, 2020

Adding multi-factor authentication (MFA) at these various providers (where available) and/or establishing a customer-specific personal identification number (PIN) also can help secure online access. Armed with access to your inbox, thieves can then reset the password for any other service or account that is tied to that email address.

Accountability 341

Accountability Mobile Banking Passwords 341

eSecurity Planet

FEBRUARY 15, 2022

The agencies offered some sound cybersecurity advice for BlackByte that applies pretty generally: Conduct regular backups and store them as air-gapped, password-protected copies offline. Audit user accounts with administrative privileges and configure access controls with least privilege in mind, and use multifactor authentication.

Ransomware 117

Ransomware Encryption Backups Accountability 117

Malwarebytes

SEPTEMBER 5, 2023

When we think of ransomware and brute force password guessing attacks, we normally think of RDP, but recent research from Securonix reminds us that anything secured with a password and exposed to the Internet is of interest to cybercriminals. At the time this was said to represent 47% of Internet-connected MongoDB databases.

Internet 77

Internet Internet Ransomware Passwords 77

eSecurity Planet

APRIL 19, 2023

Since then Portnox continued to add capabilities, launched the first cloud-native NAC in 2017, and now offers a NAC SaaS solution, Portnox Cloud. authentication to gather endpoint information for reporting and enforcement. Agents Portnox does not require an agent.

IoT 93

IoT Authentication VPN Backups 93

Malwarebytes

APRIL 19, 2023

If you think 2021 is long ago, maybe you will be surprised to learn that the vulnerability used in these attacks was actually discovered in 2017. Cisco published workarounds and updates for this vulnerability in June of 2017. Review your password policy and adapt it where necessary.

Malware 74

Malware Software Authentication Passwords 74

Security Affairs

AUGUST 6, 2023

The APT group has been active since at least 2017, its campaigns involve persistent phishing and credential theft campaigns leading to intrusions and data theft. The APT primarily targets NATO countries, but experts also observed campaigns targeting the Baltics, Nordics, and Eastern Europe regions, including Ukraine.

Phishing 77

Phishing Social Engineering Authentication Cryptocurrency 77

eSecurity Planet

SEPTEMBER 16, 2021

The last update was in November 2017, and the latest draft is available for peer review until the end of the year. Insecure authentication process such as flawed account recovery or password reset, or insecure session tokens. Identification and Authentication Failures (?): Previously “Broken Authentication.”

Authentication 119

Authentication Penetration Testing Firewall Security Awareness 119

SecureList

OCTOBER 25, 2023

Subsequent analysis revealed earlier instances of suspicious code dating back to 2017. Importantly, our investigation, which considered binary timestamps, indicated that this exploit was created prior to April 2017. It is worth noting that the EternalBlue exploit was publicly disclosed by the Shadow Brokers group on April 14, 2017.

Malware 107

Malware DNS Encryption Cryptocurrency 107

Hot for Security

MARCH 29, 2021

The leaked data contained no highly sensitive information such as passwords, credit card numbers or Social Security numbers. River City Media (RCM) is a US-based email marketing company that made headlines in March 2017 after exposing 1.4 Who is River City Media, and what information was exposed in the breach?

Data breaches 116

Data breaches Media Marketing Social Engineering 116

Duo's Security Blog

AUGUST 16, 2021

“There are primarily three ways you can authenticate someone: with their username and password, with two-factor authentication, and with a company-supplied device that you can trace. For most stuff, you should have two of those things. For critical things, you should have all three.”.

Authentication 98

Authentication Data breaches Encryption Retail 98

The Last Watchdog

DECEMBER 19, 2022

Cybersecurity firm Positive Technologies found 88 new IAB sales on dark web marketplaces in the first quarter of 2020, compared to just three in all of 2017. These include: •Using multifactor authentication (MFA) on all accounts. IABs aren’t necessarily a new threat, but they’ve seen tremendous growth over the past few years.

Cybercrime 124

Cybercrime Digital transformation Ransomware Cybersecurity 124