Duo's Security Blog

NOVEMBER 16, 2020

The project touches many aspects of Duo, but focuses on drastically improving Duo’s web-based authentication interface. A consistent request we’ve heard from customers is, ‘we want more flexibility around customizing the authentication prompt. The interface, or prompt, is a core component in delivering our secure access solution.

Authentication 70

Authentication System Administration Mobile Phishing 70

CyberSecurity Insiders

NOVEMBER 18, 2021

Numerous articles, vulnerability reports, and analytical materials prove this fact. This can be carried out directly or using a shadow payload or using a phishing attack aimed at compromising the user's system. The concept of PIM, in contrast to PAM, is aimed at managing existing accounts: administrator, root, etc.

Accountability 133

Accountability Passwords Authentication Social Engineering 133

eSecurity Planet

MARCH 25, 2022

This article looks at the remote desktop protocol, how RDP attacks work, best practices for defense, the prevalence of RDP attacks today, and how remote desktop software vendors are securing their clients. A few days later, IT systems started malfunctioning with ransom messages following. Reconnaissance.

VPN 117

VPN Software Authentication Encryption 117

eSecurity Planet

SEPTEMBER 10, 2021

What authentication methods does the provider support? Additionally, multi-factor authentication (MFA) can further reduce the risk of malicious actors gaining access to sensitive information, even if they manage to steal usernames and passwords. This article was originally published on May 24, 2017. Enable security logs.

Penetration Testing 131

Penetration Testing Encryption Risk Technology 131

SiteLock

APRIL 7, 2022

In this article, we look at a few phishing kits that were recently found in customer sites and compare their structure and complexity. This article is going to explore two different phishing kits that we have found and highlight the ways in which they can be detected and avoided. What Is A Phishing Kit? Phishing Kit – Citi Group.

Phishing 52

Phishing Engineering System Administration Malware 52

Malwarebytes

AUGUST 18, 2021

In this article, I describe poorly-documented, or completely undocumented, features that could stop working as advertised or disappear completely without notice in future releases of macOS. Signed System Volume (SSV) cryptographically sealed the boot volume and made it tamper-evident. Again, see support article HT210108.

Firmware 144

Firmware Architecture Risk Engineering 144

Adam Levin

APRIL 8, 2019

Facebook’s Two-Factor Authentication phone numbers exposed: After prompting users to provide phone numbers to secure their accounts, Facebook allows anyone to look up their account by using them. Denying anything happened gives system administrators more time to identify and patch newly discovered vulnerabilities.

Hacking 100

Hacking Data privacy Artificial Intelligence System Administration 100

Security Boulevard

JUNE 20, 2022

They recommend tiered administration with dedicated admin accounts. Admins should use a hardened Privileged Access Workstation (PAW) when performing administrative tasks, and the admin session must require Multi-Factor Authentication (MFA) and Just-In-Time (JIT) restrictions. Sometimes we cannot use deny rules, though.

Accountability 52

Accountability Risk Authentication Passwords 52