Duo's Security Blog

DECEMBER 6, 2022

While this isn’t entirely wrong, passwords are difficult to remember and rarely secure. Experts in the fields of data protection and information security now look towards new technologies to make system access much more secure.

Architecture 121

Architecture Authentication Passwords Technology 121

Security Affairs

OCTOBER 30, 2024

Google has patched a critical Chrome vulnerability, tracked as CVE-2024-10487, reported by Apple Security Engineering and Architecture (SEAR) on October 23, 2024. Google addressed a critical vulnerability in its Chrome browser, tracked as CVE-2024-10487, which was reported by Apple.

Engineering 133

Engineering Architecture Hacking Information Security 133

eSecurity Planet

APRIL 7, 2023

These and many other network security solutions are ramped up specifically on the DMZ, making it so network administrators can often detect unusual behavior before unauthorized users try to move past the DMZ to access the LAN. Definition, Architecture & Benefits appeared first on eSecurityPlanet.

Architecture 102

Architecture Firewall Network Security Technology 102

eSecurity Planet

OCTOBER 18, 2024

Knowledge of cloud systems architecture and how it interacts with various devices is invaluable. Blockchain: Developed primarily for cryptocurrency applications and maligned for manipulating those markets, blockchain can be a valuable security tool, as its universe of connected nodes is almost impossible to corrupt or destroy.

Cybersecurity 125

Cybersecurity Artificial Intelligence Penetration Testing CISO 125

Krebs on Security

DECEMBER 1, 2022

“Our team quickly triaged the report and determined the risk to partners to be minimal,” said Patrick Beggs , ConnectWise’s chief information security officer. ” However, LastPass maintains that its “customer passwords remain safely encrypted due to LastPass’s Zero Knowledge architecture.”

Phishing 316

Phishing Architecture Passwords Accountability 316

Security Affairs

JUNE 10, 2025

These samples, named “morte,” support multiple architectures and link to C2 domains like nuklearcnc.duckdns[.]org Like the first variant, it targets multiple IoT architectures. org and galaxias[.]cc. Other samples (e.g., neon,” “k03ldc”) showed ties to V3G4 and LZRD variants with unique console strings.

Architecture 97

Architecture IoT Threat Detection Malware 97

Schneier on Security

AUGUST 8, 2022

Fun fact: Those three algorithms were broken by the Center of Encryption and Information Security, part of the Israeli Defense Force. It took a couple of decades to fully understand von Neumann computer architecture; expect the same learning curve with quantum computing. The second uncertainly is in the algorithms themselves.

Encryption 360

Encryption Architecture Engineering Information Security 360

Security Affairs

FEBRUARY 15, 2025

“we have explored a suspicious (and quite common) architecture where authentication is enforced at a proxy later but then the request is passed through a second layer with different behavior.” ” reads the report published by Assetnote.

Firewall 103

Firewall Authentication Architecture Risk 103

Security Affairs

JANUARY 10, 2025

In August 2024, Russian crooks advertised a macOS malware called BANSHEE Stealer that can target both x86_64 and ARM64 architectures. Check Point researchers discovered a new version of the Banshee macOS infostealer which is distributed through phishing websites and fake GitHub repositories, often masqueraded as popular software.

Malware 121

Malware Advertising Antivirus Cybercrime 121

Security Affairs

FEBRUARY 19, 2025

we have explored a suspicious (and quite common) architecture where authentication is enforced at a proxy later but then the request is passed through a second layer with different behavior. Fundamentally, these sorts of architectures lead to things like header smuggling and path confusion, which can result in many impactful bugs!

Firewall 106

Firewall Authentication Architecture Internet 106

The Hacker News

AUGUST 13, 2024

A team of researchers from the CISPA Helmholtz Center for Information Security in Germany has disclosed an architectural bug impacting Chinese chip company T-Head's XuanTie C910 and C920 RISC-V CPUs that could allow attackers to gain unrestricted access to susceptible devices. The vulnerability has been codenamed GhostWrite.

Architecture 130

Architecture Information Security 130

Daniel Miessler

DECEMBER 24, 2022

If you follow Information Security at all you are surely aware of the LastPass breach situation. These encrypted fields remain secured with 256-bit AES encryption and can only be decrypted with a unique encryption key derived from each user’s master password using our Zero Knowledge architecture.

Password Management 364

Password Management Passwords Encryption Backups 364

Schneier on Security

OCTOBER 13, 2020

“We vigorously protect the privacy of our users while supporting the important work of law enforcement,” Google’s director of law enforcement and information security Richard Salgado told us. We have knowingly and willingly built the architecture of a police state, just so companies can show us ads.

Surveillance 362

Surveillance Wireless Accountability Architecture 362

Security Affairs

APRIL 2, 2025

The most interesting characteristic of the Triada Trojan is its modular architecture, which gives it theoretically a wide range of abilities. Triada was designed with the specific intent to implement financial frauds, typically hijacking financial SMS transactions.

Malware 122

Malware Cryptocurrency Mobile Firmware 122

Anton on Security

OCTOBER 18, 2024

Many organizations are looking for trusted advisors , and this applies to our beloved domain of cyber/information security. How would you approach securing something? What are some ideas for doing architecture in cases of X and Y constraints? and only for a limited number of oracle use cases (give me precise answers!

Architecture 130

Architecture Risk CISO Cybersecurity 130

Security Affairs

JANUARY 28, 2025

DeepSeek’s AI model is highly appreciated due to its exceptional performance, low costs, versatility across various industries, and innovative architecture that enhances learning and decision-making.

Artificial Intelligence 118

Artificial Intelligence DDOS Architecture Marketing 118

Security Affairs

MARCH 20, 2025

The modular architecture of the malware allows to extend its functionalities for multiple malicious purposes, including surveillance, reconnaissance, information theft, DDoS attacks, and arbitrary code execution.

Computers and Electronics 108

Computers and Electronics Telecommunications Malware Surveillance 108

Security Affairs

JANUARY 21, 2025

The experts used a diagnostic software to analyze the vehicle architecture, scan the Electronic Control Unit (ECU), identify its version, and test diagnostic functions. Kaspersky published research findings on the first-generation Mercedes-Benz User Experience (MBUX) infotainment system, specifically focusing on the Mercedes-Benz Head Unit.

Software 133

Software Architecture Media Engineering 133

Security Affairs

NOVEMBER 2, 2024

“The adversaries appear to be well-resourced, patient, creative, and unusually knowledgeable about the internal architecture of the device firmware. ” concludes the report. ” Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, China-linked threat actors)

Firmware 122

Firmware Government Firewall Malware 122

Security Affairs

MARCH 19, 2025

” Rule files are configuration files that guide AI Agent behavior in code generation and modification, defining coding standards, project architecture, and best practices.

Architecture 99

Architecture Risk Hacking Software 99

SecureWorld News

MARCH 13, 2025

Kowski also emphasizes the need for a multi-layered security approach, stating that "multi-factor authentication, strong password policies, and zero-trust architecture are essential defenses that significantly reduce the risk of AI-powered attacks succeeding, regardless of how convincing they appear."

Malware 113

Malware Cybersecurity Cyber threats Threat Detection 113

The Last Watchdog

JULY 7, 2023

This necessitates a shift in paradigm for both security professionals and vendors, as IBM i Systems have been renowned for their inherent security. IBM i users are strongly advised to prioritize regular scanning, vulnerability remediation, and patching to ensure the security of their systems.

Architecture 179

Architecture Hacking Media Government 179

Security Affairs

MAY 13, 2025

Once inside, they could access all user communications, steal data, impersonate users, and compromise credentials, posing major operational risks. ” reads the report published by Microsoft.

DNS 86

DNS Telecommunications Architecture Media 86

Security Affairs

MAY 27, 2021

. • NASA lacked an Agency-wide risk management framework for information security and an information security architecture. The Security Operations Center lacks visibility and authority to manage information security incident detection and remediation for the entirety of NASA’s IT infrastructure.

Information Security 134

Information Security Cyber Attacks Mobile Architecture 134

Security Affairs

JUNE 12, 2025

These samples, named “morte,” support multiple architectures and link to C2 domains like nuklearcnc.duckdns[.]org Like the first variant, it targets multiple IoT architectures. org and galaxias[.]cc. Other samples (e.g., neon,” “k03ldc”) showed ties to V3G4 and LZRD variants with unique console strings.

52

52

SecureWorld News

MAY 6, 2025

The cybersecurity industry has long since moved to a mental model of resilience when thinking about programs and architecture. The panel dives into a growing movement in cybersecurity leadership: shifting from reacting to burnout to building cultures of sustainable performance and resilience.

CISO 88

CISO InfoSec Cybersecurity Architecture 88

The Last Watchdog

MAY 19, 2022

Design your architecture in a way where the CMS back end (the behind-the-scenes content repository) is not directly coupled to the front end (the presentation system).

Data breaches 262

Data breaches Encryption Mobile Technology 262

SecureWorld News

FEBRUARY 27, 2025

As global cybersecurity threats continue to rise, information security professionals must enroll in continuous education and training programs to acquire current knowledge and skills that help organizations thwart these costly risks. It focuses on enterprise security programs.

Cybersecurity 65

Cybersecurity Information Security Penetration Testing Backups 65

Security Affairs

DECEMBER 15, 2023

The malicious code can target various architectures, it supports both flooder and backdoor capabilities. The primary target of NKAbuse is Linux desktops, however, it can target MISP and ARM architecture. NKN (New Kind of Network) is a decentralized peer-to-peer network protocol that relies on blockchain technology.

Malware 141

Malware Architecture Technology DDOS 141

The Last Watchdog

AUGUST 16, 2024

As an “AI-native” security architecture, HyperShield promises to redefine traditional security protocols through its automated proactive cybersecurity measures and AI-driven security solutions.

Cybersecurity 130

Cybersecurity Architecture Technology Network Security 130

The Last Watchdog

OCTOBER 19, 2020

For organizations looking to improve their security posture, this is causing confusion and vendor fatigue, especially for companies that don’t have a full time Chief Information Security Officer. The vendors are well-intentioned.

eCommerce 235

eCommerce Cybersecurity B2B Marketing 235

Security Affairs

NOVEMBER 1, 2021

The botnet leverages a robust architecture based on a combination of third-party services, P2P, and Command & Control servers. This architecture was implemented to make the botnet resilient to takedowns by law enforcement and security firms with the support of the vendors of the infected devices.

Architecture 145

Architecture DDOS Advertising DNS 145

Security Affairs

MARCH 2, 2025

DragonForce Ransomware Group is Targeting Saudi Arabia Massive Botnet Targets M365 with Stealthy Password Spraying Attacks Notorious Malware, Spam Host Prospero Moves to Kaspersky Lab ACRStealer Infostealer Exploiting Google Docs as C2 #StopRansomware: Ghost (Cring) Ransomware The GitVenom campaign: cryptocurrency theft using GitHub Silent Killers: (..)

Malware 63

Malware Architecture IoT Ransomware 63

The Last Watchdog

JANUARY 8, 2023

The need for reset and oversight is so great that a new class of technology is emerging to give organizations a better grip on the digital sprawl that’s come to define modern-day enterprise architecture. About the essayist: Chris Reffkin is chief information security officer at cybersecurity software and services provider Fortra.

Risk 214

Risk Cybersecurity Technology CISO 214

Security Affairs

JANUARY 27, 2025

“As we saw, text-based protocols are often vulnerable to injection, and a small architecture flaw can lead to a big security issue.” “I hope that this research helped the Git community to improve its security, and I am looking forward to seeing further research on Git-related projects.”

Architecture 67

Architecture Hacking Information Security 67

The Last Watchdog

FEBRUARY 26, 2023

At the developer level, they will fundamentally reshape how programmers do their work day in and day out – including employing more project management tools and secure system architecture frameworks to track and mitigate risks at any stage in the SDLC.

Cyber threats 203

Cyber threats Software Risk CISO 203

The Last Watchdog

AUGUST 2, 2023

Padron “As our hybrid environment grew due to cloud migration and regulatory requirements, getting holistic visibility into our data stored on-premises and in the cloud is becoming a challenging task for our security and compliance teams,” said Nick Padron, Director of Information Security at Fairfield.

Cloud Migration 189

Cloud Migration Risk Architecture Media 189