Duo's Security Blog

APRIL 20, 2023

A major leading research and teaching institution, the University was looking for a multi-factor authentication (MFA) solution that could integrate with existing IT architecture and be rolled out easily across campus. Duo’s enrollment and authentication processes made it easy for even the most anti-tech users to get up and running with MFA.

Phishing 64

Phishing Social Engineering Authentication Engineering 64

Duo's Security Blog

JUNE 27, 2023

Multi-factor authentication (MFA) is a critical component of their security program, but the solution that was packaged with the existing enterprise suite did not meet the requirements of the IT security team. Cyber attackers are increasingly targeting gaps in weaker multi-factor authentication implementations.

Ransomware 73

Ransomware Healthcare Phishing Authentication 73

Security Boulevard

APRIL 7, 2022

But that is a topic for another blog.). However, there is a drawback with TLS: TLS guarantees authenticity but by default this only happens in one direction: the client authenticates the server, but the server doesn’t authenticate the client. This is where mTLS comes useful—mTLS makes the authenticity symmetric.

Authentication 52

Authentication Encryption Digital transformation 52

Thales Cloud Protection & Licensing

SEPTEMBER 10, 2019

Additionally, 58% of the data security leaders surveyed indicated that multi-factor authentication was the most likely technology to protect cloud and web-based apps. In addition, for more information on how you can secure access to your cloud services and applications, please download our eBook, Four Steps to Cloud Access Management.

Consumer Services 115

Consumer Services Authentication Passwords Technology 115

Duo's Security Blog

AUGUST 16, 2021

“There are primarily three ways you can authenticate someone: with their username and password, with two-factor authentication, and with a company-supplied device that you can trace. For most stuff, you should have two of those things. For critical things, you should have all three.”.

Authentication 96

Authentication Data breaches Encryption Retail 96

Security Boulevard

OCTOBER 2, 2023

This blog examines the escalating phishing landscape, shortcomings of common anti-phishing approaches, and why implementing a Protective DNS service as part of a layered defense provides the most effective solution. Often used to compromise executive and privileged accounts. Users still access harmful links or attachments.

DNS 64

DNS Phishing Social Engineering Engineering 64

Security Boulevard

JULY 19, 2022

Authenticate your K8s clusters with machine identities. The primary access point for a Kubernetes cluster is the Kubernetes API, therefore we need to authenticate and authorize both developers and services accessing the API. API authentication. API authentication covers both humans and clients accessing the API.

Authentication 52

Authentication Digital transformation Risk Engineering 52

Duo's Security Blog

MAY 10, 2023

Effectively protecting complex networks against sophisticated phishing attacks involves a comprehensive security stack including multi-factor authentication (MFA) , single sign-on (SSO) , and domain name system (DNS) security. Then, check out our ebook Duo for Essential Eight to see how Duo fits into an Essential Eight security strategy.

Phishing 54

Phishing DNS Authentication Risk 54

Cisco Security

JANUARY 10, 2023

Using this information, last year I wrote a blog summing up the nine top of mind issues I believed will most impact CISOs as we headed into 2022. For more practical advice on this topic, I also wrote a blog on some of the challenges and opportunities within the cyber liability insurance market back in June which you can read here.

CISO 127

CISO Insurance Cyber Insurance Phishing 127

Thales Cloud Protection & Licensing

APRIL 29, 2024

This blog will briefly overview the most essential developments shaping the legislative and compliance environment. PSD3 sets out more extensive Strong Customer Authentication (SCA) regulations and stricter rules on access to payment systems and account information and introduces additional safeguards against fraud.

Risk 71

Risk Manufacturing Digital transformation Cybersecurity 71

Security Boulevard

MAY 12, 2022

SPIFFE solves the problem of workload authentication in diverse environments. Access control, secrets management, and identity are all dependent on each other,” states the SPIFFE eBook. Adopting SPIFFE allows you to mutually authenticate systems wherever they are running. That is where SPIFFE comes in. Principles of SPIFEE.

Architecture 52

Architecture Authentication Data breaches Software 52

Security Boulevard

APRIL 29, 2024

This blog will briefly overview the most essential developments shaping the legislative and compliance environment. PSD3 sets out more extensive Strong Customer Authentication (SCA) regulations and stricter rules on access to payment systems and account information and introduces additional safeguards against fraud.

Risk 72

Risk Manufacturing Cybersecurity Digital transformation 72

Security Boulevard

MARCH 15, 2022

A few days later, Lapsus$ announced on its Telegram channel that it had breached Samsung and offered evidence including biometric authentication information and source code from both Samsung and one of its suppliers, Qualcomm. Read our free eBook! "> Off. Let’s take a historic look at Lapsus$ ransomware group’s infamous attacks….

Ransomware 128

Ransomware Telecommunications Firmware Media 128

Duo's Security Blog

APRIL 29, 2021

Compliance with corporate device health policy can be enforced each time the user attempts to authenticate. When deployed in this mode, the Device Health app will simply collect health data and report it back at each authentication when the application is installed on the access device.

Authentication 55

Authentication Encryption Firewall Risk 55

CyberSecurity Insiders

JUNE 24, 2021

As part of our series on Digital Identity , this blog will look back on the personal identification techniques of previous eras to show how methods of identification have developed over the course of human history. To find out more, read Thales’ recent eBook on digital identity. 100,000 years ago – Jewellery.

Computers and Electronics 115

Computers and Electronics Passwords Technology Government 115

Duo's Security Blog

DECEMBER 7, 2022

MFA is a necessity, not a luxury There is a good reason that nearly every cyber liability insurance carrier requires multi-factor authentication (MFA) and why, according to wholesale specialty insurance distributors CRC Group , clients without MFA risk non-renewal or a retention hike of 100% or more. What are you doing about backups?

Insurance 73

Insurance Cyber Insurance Ransomware Risk 73

Thales Cloud Protection & Licensing

MAY 6, 2021

As such, this year’s World Password Day is in fact a timely reminder for businesses to drop passwords forever, and instead rollout access management solutions such as passwordless authentication. In our previous blogs we have discussed the many challenges that organizations face as they are seeking to embrace the Zero Trust security model.

Social Engineering 96

Social Engineering Authentication Passwords Technology 96

Security Boulevard

OCTOBER 7, 2022

With top PKI security , your business will be able to stand out to customers as a brand that provides unparalleled protection for their safety and identity through reliable encryption and authentication technologies. Read the FREE eBook. "> Off. Reduce risk and achieve compliance. Are you making any of these common PKI mistakes?

CISO 52

CISO Risk Cyber Attacks Technology 52

Security Boulevard

JUNE 2, 2022

When properly protected, code signing is an effective tool to stop the spread of malware, and nearly every organization relies on code signing to confirm their code is authentic and hasn’t been corrupted with malware. Download the eBook to learn more. Why do cybercriminals target code signing keys? UTM Medium. UTM Source. UTM Campaign.

Software 52

Software Malware Backups Marketing 52

Thales Cloud Protection & Licensing

JULY 19, 2018

Advice on how to comply with PCI DSS can be found in our recent eBook, “ PCI Compliance and Data Protection for Dummies ”. The post The Latest on PCI: Minor on PCI DSS, Major on Almost Everything Else appeared first on Data Security Blog | Thales e-Security. Major PCI initiatives in 2018.

Architecture 54

Architecture Software Authentication Risk 54