Duo's Security Blog

JUNE 8, 2023

Some of it is positive, but the general consensus is that people don’t love multi-factor authentication (MFA); they see it as a necessary evil at best. That’s why I’m so excited to announce our vision to streamline Duo’s authentication workflows, a feature that will deliver seamless, secure login experiences.

Authentication 135

Authentication VPN System Administration Engineering 135

Cisco Security

AUGUST 24, 2023

Cisco is aware of reports that Akira ransomware threat actors have been targeting Cisco VPNs that are not configured for multi-factor authentication to infiltrate organizations, and we have observed instances where threat actors appear to be targeting organizations that do not configure multi-factor authentication for their VPN users.

Authentication 57

Authentication Ransomware VPN Passwords 57

Security Affairs

APRIL 28, 2024

From March 18, 2024, to April 16, 2024, Duo Security and Cisco Talos observed large-scale brute-force attacks against a variety of targets, including VPN services, web application authentication interfaces and SSH services. This method poses a risk of exposing sensitive data or enabling fraudulent activities.

VPN 115

VPN Accountability Firewall Data breaches 115

Security Affairs

SEPTEMBER 25, 2022

Threat actors target GitHub users to steal credentials and two-factor authentication (2FA) codes by impersonating the CircleCI DevOps platform. GitHub is warning of an ongoing phishing campaign targeting its users to steal credentials and two-factor authentication (2FA) codes by impersonating the CircleCI DevOps platform.

Accountability 110

Accountability Phishing Authentication Passwords 110

Thales Cloud Protection & Licensing

OCTOBER 28, 2021

Trick or Treat: The Choice is Yours with Multifactor Authentication. Whether you want the ‘trick’ of a malevolent threat actor infiltrating your network by exploiting a compromised password or the ‘treat’ from the peace of mind associated with multifactor authentication, the choice is yours. Fri, 10/29/2021 - 05:29.

Authentication 71

Authentication VPN Passwords Accountability 71

Security Affairs

FEBRUARY 12, 2024

Once they’re in, they can grab your emails, usernames, passwords, and more. They might even lock you out of your own accounts by resetting your passwords. Avoid entering any data if you see a warning message about a site’s authenticity. Most browsers will alert you if a site isn’t secure.

DNS 129

DNS VPN Encryption Passwords 129

Malwarebytes

FEBRUARY 7, 2024

I reached out to the person that owns the account to find out if he knew how his account got compromised. These apps would then spread further from the compromised user account. The script on that site looks at your IP address, your type of machine and whether you are using a VPN. Click your profile picture.

Scams 135

Scams Passwords Identity Theft Accountability 135

The Last Watchdog

MARCH 6, 2021

•Use strong passwords. It is essential to ensure that all accounts are protected with strong passwords. To this day, a significant amount of people still use the password across multiple accounts, which makes it much simpler for a cybercriminal to compromise a password and take over accounts.

VPN 214

VPN Firewall Antivirus Passwords 214

Security Affairs

SEPTEMBER 8, 2023

An unauthenticated, remote attacker can exploit the vulnerability to conduct a brute force attack in an attempt to identify valid username and password combinations or an authenticated, remote attacker to establish a clientless SSL VPN session with an unauthorized user. ” reads the advisory published by the IT giant.

Ransomware 138

Ransomware VPN Authentication Hacking 138

Krebs on Security

JULY 10, 2022

Twice in the past month KrebsOnSecurity has heard from readers who’ve had their accounts at big-three credit bureau Experian hacked and updated with a new email address that wasn’t theirs. In both cases the readers used password managers to select strong, unique passwords for their Experian accounts.

Accountability 313

Accountability Passwords Authentication Password Management 313

CyberSecurity Insiders

MAY 4, 2023

1. Use Strong Passwords: Strong passwords are the first line of defense against hackers. Avoid using easy-to-guess passwords like “123456” or “password.” Also, use different passwords for different online accounts. If you must use public Wi-Fi, use a VPN to encrypt your traffic.

VPN 106

VPN Passwords Scams Accountability 106

Malwarebytes

JULY 1, 2021

SMS authentication codes are back in the news, and the word I’d use to summarise their reappearance is “embattled.” ” I can still remember a time where two-factor authentication (2FA), authentication grids, regional lockouts, Yubikeys, and offline authentication apps simply did not exist.

Authentication 103

Authentication Phishing Passwords Mobile 103

Malwarebytes

JULY 2, 2021

Some attacks used known vulnerabilities that allowed remote code execution (RCE), while others started by trying to identify valid credentials through password spraying. The applications in the cluster used TOR and commercial VPN services to avoid revealing their IP addresses. Aim for strong passwords, but plan for bad ones.

Passwords 117

Passwords Authentication Government VPN 117

Krebs on Security

NOVEMBER 21, 2020

And in May of this year, GoDaddy disclosed that 28,000 of its customers’ web hosting accounts were compromised following a security incident in Oct. “This gave the actor the ability to change DNS records and in turn, take control of a number of internal email accounts. . 2019 that wasn’t discovered until April 2020.

Cryptocurrency 363

Cryptocurrency VPN Scams Social Engineering 363

CyberSecurity Insiders

JUNE 5, 2023

Use Strong and Unique Passwords : One of the most basic yet critical steps is to create strong, unique passwords for your online accounts. Additionally, employ a password manager to securely store and generate unique passwords for each account. Be vigilant of deceptive websites that mimic legitimate ones.

Passwords 126

Passwords Encryption Media Banking 126

Malwarebytes

AUGUST 28, 2023

The Cisco Product Security Incident Response Team (PSIRT) has posted a blog about Akira ransomware targeting VPNs without Multi-Factor Authentication (MFA). The Cisco team states that it is aware of reports of the Akira ransomware group going specifically after Cisco VPNs that are not configured for MFA.

Ransomware 87

Ransomware VPN Passwords Backups 87

Security Affairs

OCTOBER 20, 2021

a demo for anti-virus software, VPN, music players, photo editing or online games) to hijack the channel of YouTube creators. The researchers identified around 15,000 actor accounts, most of which were created for this campaign. “Most of the observed malware was capable of stealing both user passwords and cookies. .

Accountability 132

Accountability Malware Phishing Social Engineering 132

Dark Reading

JUNE 8, 2021

No multi-factor authentication was attached to the stolen VPN password used by the attackers, Colonial Pipeline president & CEO Joseph Blount told a Senate committee today.

VPN 44

VPN Accountability Authentication Passwords 44

Krebs on Security

FEBRUARY 26, 2023

million customers, including website administrator passwords, sFTP credentials, and private SSL keys; -December 2022: Hackers gained access to and installed malware on GoDaddy’s cPanel hosting servers that “intermittently redirected random customer websites to malicious sites.”

Hacking 265

Hacking Social Engineering Phishing Scams 265

Webroot

APRIL 2, 2024

A brute force attack is a cyber attack where the attacker attempts to gain unauthorized access to a system or data by systematically trying every possible combination of passwords or keys. There are many already leaked password lists that are commonly used, and they grow after every breach. What is a Brute Force Attack?

Cybersecurity 83

Cybersecurity Passwords VPN Authentication 83

Krebs on Security

AUGUST 21, 2020

The advisory came less than 24 hours after KrebsOnSecurity published an in-depth look at a crime group offering a service that people can hire to steal VPN credentials and other sensitive data from employees working remotely during the Coronavirus pandemic. authenticate the phone call before sensitive information can be discussed.

VPN 358

VPN Social Engineering Authentication Engineering 358

CSO Magazine

JUNE 23, 2021

With the recent Colonial Pipeline attack , the initial infection point was reportedly an old, unused, but still open VPN account. The password had been found on the dark web rather than obtained via phishing , implying that it had been leaked or reused by a Colonial employee.

VPN 117

VPN Accountability Phishing Authentication 117

Heimadal Security

OCTOBER 14, 2022

MFA, or multi-factor authentication, is a security technique that requires users to verify their identities by offering multiple forms of identification before being granted access to a resource such as an application, online account, website, or VPN.

VPN 97

VPN Authentication Passwords Accountability 97

Schneier on Security

DECEMBER 4, 2018

There are lots of articles about there telling people how to better secure their computers and online accounts. To remain anonymous and secure on the Internet, invest in a Virtual Private Network account, but remember, the bad guys are very smart, so by the time this column runs, they may have figured out a way to hack into a VPN.

VPN 246

VPN Passwords Accountability Mobile 246

Krebs on Security

AUGUST 19, 2020

But one increasingly brazen group of crooks is taking your standard phishing attack to the next level, marketing a voice phishing service that uses a combination of one-on-one phone calls and custom phishing sites to steal VPN credentials from employees. The employee phishing page bofaticket[.]com. Image: urlscan.io. ” SPEAR VISHING.

Phishing 356

Phishing VPN Social Engineering Media 356

eSecurity Planet

MARCH 21, 2022

Using misconfigured multi-factor authentication (MFA) and an unpatched Windows vulnerability, Russian state-sponsored hackers were able to breach a non-governmental organization (NGO) and escalate privileges, the Cybersecurity and Infrastructure Security Agency (CISA) and the FBI revealed last week.

VPN 108

VPN Accountability Authentication Passwords 108

Webroot

FEBRUARY 26, 2024

They’ll try to sweet-talk you into clicking on suspicious links or divulging sensitive information like passwords or credit card details. Your 7 tips to stay safe online Use strong passwords Let’s kick things off with the basics. Remember: real companies don’t ask for your personal data via email.

Scams 99

Scams VPN Passwords Phishing 99

Approachable Cyber Threats

OCTOBER 5, 2023

Use strong passwords : Choosing a robust password that cannot be easily guessed is one of the most important actions that can be taken. It is recommended that you use a password that is at least eight characters long ( check out our Password Table for why you should select a strong password). ❯

Passwords 106

Passwords Identity Theft VPN Authentication 106

Security Affairs

AUGUST 10, 2022

The investigation conducted by Cisco Security Incident Response (CSIRT) and Cisco Talos revealed that threat actors compromised a Cisco employee’s credentials after they gained control of a personal Google account where credentials saved in the victim’s browser were being synchronized. ” reads the analysis published by Cisco Talos.

Ransomware 125

Ransomware Hacking VPN Phishing 125

Hot for Security

JUNE 22, 2021

Don’t cut your vacation short by neglecting to secure your devices and personal data, and save yourself the headache of losing access to your accounts or finances. Update passwords for all online accounts to protect against any potential credential stuffing attacks. Before departure. While at your destination.

VPN 119

VPN Banking Passwords Accountability 119

Webroot

FEBRUARY 15, 2024

With access to your personal information, bad actors can drain your bank account and damage your credit—or worse. Use strong and unique passwords Passwords are your first line of defense to protecting your online accounts from hackers. But it’s just as important you don’t use the same password for multiple accounts.

Identity Theft 73

Identity Theft Banking Scams Passwords 73

Security Affairs

JULY 27, 2023

DepositFiles’ clients are at risk of their personally identifiable information, files, and passwords being stolen. Cybercriminals could take over the official communication channels of DepositFiles, including social media accounts and abuse & support emails. researchers said. researchers said.

Data breaches 93

Data breaches VPN Media Passwords 93

CyberSecurity Insiders

APRIL 16, 2021

Security through a VPN. Among many other benefits, a VPN encrypts these files and keeps the online activity private by masking a user’s real IP address. Here are the different ways in which a VPN elevates cybersecurity: Encryption. Encryption technology in VPNs helps conceal the user’s data.

Cybersecurity 106

Cybersecurity Password Management Passwords VPN 106

IT Security Guru

JUNE 30, 2021

Using the same password for all software applications increase the chances of cybercriminals learning an individual’s log-in credentials and gaining unauthorized access – resulting in data theft, identity theft and other harm. Single Sign-On (SSO) is a solution that combats password fatigue. fewer requests to reset passwords).

Password Management 115

Password Management Passwords VPN B2C 115

Security Affairs

OCTOBER 17, 2023

’ The CERT-UA also reported that the state-sponsored hackers used compromised VPN accounts that weren’t protected by multi-factor authentication. Authentication data collected by POEMGATE can be used for lateral movement and other malicious activities on the compromised networks. “Note (!)

Telecommunications 112

Telecommunications Authentication Data collection Passwords 112

Security Affairs

AUGUST 7, 2022

Greek intelligence service used surveillance malware to spy on a journalist, Reuters reports Slack resets passwords for about 0.5% of its users due to the exposure of salted password hashes Twitter confirms zero-day used to access data of 5.4 Pierluigi Paganini. SecurityAffairs – hacking, newsletter).

Spyware 127

Spyware Manufacturing Small Business Surveillance 127

Malwarebytes

FEBRUARY 28, 2023

After this, the attacker was able to wait until the employee entered their master password and authenticated themselves with multi-factor authentication. Start using multi-factor authentication (MFA) to make your account immune to similar compromises in future. Use a VPN to connect to the office network.

VPN 93

VPN Media Backups Passwords 93