Security Boulevard

JULY 6, 2023

It's no secret that the bad guys are training their artificial intelligence (AI) engines to crack passwords, perform account takeovers (ATO), and automate their ransomware demands. In fact, they are using AI to not only predict your users' current passwords. Mind blown!

Artificial Intelligence 105

Artificial Intelligence Passwords Authentication Accountability 105

Security Boulevard

FEBRUARY 14, 2022

How Enterprise Customer Identity Helps You Make Money, Slash Costs, and Reduce Risk. Here are four reasons why investing in great customer experiences with ForgeRock's enterprise CIAM will help your organization make money, slash costs, and reduce risk. Reduced Risk. ForgeRock also reduces risk with Zero Trust security.

Passwords 97

Passwords Retail Digital transformation Risk 97

CyberSecurity Insiders

APRIL 10, 2023

In the current digital landscape, identity security has gained paramount importance due to the growing cyber risks posed by phishing and social engineering attacks utilizing AI. Thus, a robust identity security framework is essential to safeguard against these risks and ensure the protection of personal information.

Identity Theft 105

Identity Theft Education Authentication Data breaches 105

NopSec

FEBRUARY 28, 2024

It turns out Ivanti is having a difficult time addressing a recent spate of critical vulnerabilities as last month’s patch resulted in the discovery of additional risk vectors. Finally, we cover a Microsoft Exchange privilege escalation vulnerability that could enable motivated threat actors to steal your NTLM password hash.

Authentication 59

Authentication Accountability Passwords Risk 59

Duo's Security Blog

JULY 15, 2021

Yes, it’s a password-less authentication method, greatly streamlining the login experience, and while that’s a great incentive to use passwordless for logging in, it’s not an improvement in authentication security in and of itself. That isn’t to say that every password-less solution needs to be phish-proof.

Phishing 100

Phishing Authentication Passwords Risk 100

Duo's Security Blog

FEBRUARY 6, 2024

Traditionally, credentials (such as usernames, passwords or security tokens) have been the gatekeepers of access. Reducing the risk of identity-based attacks Picture a scenario where an attacker acquires a list of dormant accounts, performs credential-stuffing, and gets the necessary credentials to log-in. Stay tuned!

Accountability 81

Accountability Authentication Risk Marketing 81

Duo's Security Blog

APRIL 20, 2023

Totaling up to billions of Australian Dollars at risk each year from hackers and various online scams, it's crucial that organisations (and individuals!) For one, solutions like Google Authenticator or Authy were far more confusing for the user during the enrollment process,” Stockdale said.

Phishing 77

Phishing Social Engineering Authentication Engineering 77

Duo's Security Blog

MAY 6, 2024

The security industry has diligently battled compromised credentials, evolving from passwords to multifactor authentication (MFA) to passwordless — our most secure and phishing-resistant method to date — and one that is fully supported in Duo. This means there are serious holes in our authentication armor today.

Authentication 85

Authentication Accountability VPN Phishing 85

Thales Cloud Protection & Licensing

JULY 20, 2023

Protecting Against Smart Device Break-Ins This story also demonstrates the sobering reality that we can no longer solely rely on Usernames/Passwords to protect our networks. To learn more, please consider attending our upcoming webinar featuring DigiCert’s Anthony Ricci, Senior Director of Product Management for Emerging Markets.

Manufacturing 48

Manufacturing Computers and Electronics IoT Authentication 48

Duo's Security Blog

SEPTEMBER 4, 2023

And when it comes to managing access for this plethora of devices, password security just isn’t cutting it anymore. In our recent passkey blog series , we’ve been unpacking the difference between new passkey technology and more conventional password security in light of some of the most critical authentication scenarios.

Passwords 63

Passwords Authentication Accountability Password Management 63

Thales Cloud Protection & Licensing

FEBRUARY 24, 2021

Overview of Authentication Mechanisms. In this regard, continuously authenticating users who are accessing corporate resources helps maintain trust in distributed IT environments. Let us examine some of the most prominent authentication mechanisms before we move on to the emerging continuous access evaluation protocol (CAEP) standard.

Authentication 87

Authentication Mobile Passwords Software 87

Cisco Security

NOVEMBER 2, 2022

Going beyond the hype, passwordless authentication is now a reality. Cisco Duo’s passwordless authentication is now generally available across all Duo Editions. “ Cisco Duo simplifies the passwordless journey for organizations that want to implement phishing-resistant authentication and adopt a zero trust security strategy.

Authentication 113

Authentication Passwords Phishing Mobile 113

Duo's Security Blog

OCTOBER 6, 2023

Threat actors have dramatically escalated their attacks – targeting security controls like multi-factor authentication (MFA), conducting wily social engineering attacks and extorting businesses large and small with ransomware. To achieve more resilience in this heightened risk environment, stepping up zero trust maturity is essential.

Authentication 135

Authentication Risk Social Engineering InfoSec 135

Duo's Security Blog

JULY 1, 2021

Tall Tale #1: PINs Are Just Passwords In Part 1 , we talked about how passwordless authentication is still multi-factor: Possession of a private key, ideally stored on a piece of secure hardware A biometric or PIN the authenticator uses to locally verify the user’s identity Reasoning about a PIN being used as a factor is simpler than a biometric.

Passwords 92

Passwords Surveillance Authentication Risk 92

Thales Cloud Protection & Licensing

DECEMBER 2, 2021

What is Modern Authentication and Its Role in Achieving Zero Trust Security? The evolving business and technology landscape and the need for secure, yet convenient, ways of logging into applications are driving the quest for more effective authentication. To reduce the overall risk, organizations are investing in access security.

Authentication 125

Authentication Passwords Risk Mobile 125

CyberSecurity Insiders

MAY 19, 2023

While multi-factor authentication (MFA) generally protects against common methods of gaining unauthorized account access, not all multi-factor authentication methods can defend against sophisticated attacks. Authentication establishes confidence that the claimant has possession of one or more authenticators bound to the credential.

Phishing 109

Phishing Authentication Passwords Social Engineering 109

Duo's Security Blog

NOVEMBER 20, 2023

One piece of evidence to support this hypothesis is the low adoption of a basic security control that protects against identity-based attacks - multi-factor authentication (MFA). Add to this, the risks of weak authentication factors such as SMS one-time passcodes and dormant or inactive accounts.

Threat Detection 123

Threat Detection Authentication Accountability Data breaches 123

Security Boulevard

JULY 21, 2023

This is why it's critical to secure your user identities and passwords and the IAM services that manage them. By providing visibility into attack paths, it helps to mitigate these risks. Multi-factor authentication (MFA) : MFA requires users to provide more than one form of identification to access a system or application.

Threat Detection 98

Threat Detection Authentication Passwords Accountability 98

Duo's Security Blog

JULY 6, 2023

Today we will discuss the survey makeup, review key results and explain why Duo’s Passwordless technology is well positioned to meet enterprise authentication needs highlighted in the study. Workforce authentication failures are common and MFA is still not mandatory Duo has always focused on meeting customers where they are.

Authentication 75

Authentication Passwords Risk Technology 75

Duo's Security Blog

FEBRUARY 11, 2022

To help you make the most of this new offering, Duo Product Manager Chris Demundo and Product Marketing Manager Ted Kietzman recently hosted the webinar Ask Us Anything: Passwordless Tips & Tricks , answering passwordless questions crowdsourced from our Duo Community public forum. What is passwordless authentication?

Authentication 94

Authentication Passwords Mobile Risk 94

Duo's Security Blog

MARCH 9, 2022

The Australian government is urging companies in the region to adopt strong cybersecurity practices due to increased global risk stemming from the conflict in Ukraine. Firewall status, drive encryption status, password status and whether an antivirus or anti-malware agent is running can all contribute to improved security resilience.

Cybersecurity 89

Cybersecurity Authentication Passwords VPN 89

Duo's Security Blog

OCTOBER 11, 2023

To learn more about how Duo’s access management trifecta empowers you to authenticate further and defend faster, be sure to tune into our webinar Authenticate Further, Defend Faster with Higher Security from Duo. Forget coming up with a password that will eventually, inevitably find its way onto the dark web.

Authentication 107

Authentication Risk Technology Phishing 107

Duo's Security Blog

SEPTEMBER 30, 2022

If you are not sure what the new security requirements are or if they affect your business or organization, don’t worry – we put together a webinar to help answer those questions. Watch the FTC Safeguards Rule Webinar. The definition of financial institutions includes non-financial institutions. Try Duo for free!

Cybersecurity 78

Cybersecurity Authentication CISO Healthcare 78

NetSpi Executives

APRIL 27, 2024

Logins without multi-factor authentication. terminal services, virtual private networks (VPNs), and remote desktops—often use weak passwords and do not require MFA. terminal services, virtual private networks (VPNs), and remote desktops—often use weak passwords and do not require MFA. Enable multi-factor authentication.

Ransomware 52

Ransomware Cyber Insurance Backups Insurance 52

Duo's Security Blog

NOVEMBER 6, 2023

Passwords that are easily detectable or reused often are vulnerable to phishing attacks. A smart user, when faced with the risk of stolen credentials, knows better than to face this threat alone. This lowers the number of passwords users must remember (or re-use, as is often the case).

Passwords 64

Passwords Authentication Risk Technology 64

Duo's Security Blog

JULY 29, 2021

If you’re considering passwordless authentication for your organization today, you’ve probably been thinking for a while about a holistic authentication strategy. Passwordless is a leap forward on the path to a strong and usable authentication system, consisting of many individual steps that you must navigate.

Authentication 53

Authentication Passwords Accountability Manufacturing 53

Duo's Security Blog

OCTOBER 20, 2021

Passwordless authentication is one of the biggest trends in security this year. We truly believe that passwordless authentication will be a sea change that simultaneously enables stronger security while making it easier for users to login. Naturally, at Duo we believe in the power of multi-factor authentication.

Education 52

Education Authentication Passwords CISO 52

Cisco Security

FEBRUARY 14, 2022

That brings up an even higher level of risk. Firms need to ensure seamless remote collaboration, mitigate risk to the network, employees and data, and protect themselves from COVID exposed weaknesses to operations that may have been overlooked previously. Fourth, they should ensure access is authorized, authenticated, and encrypted.

Passwords 104

Passwords Technology Government CISO 104

Security Boulevard

APRIL 12, 2022

Social Registration and Authentication. As a type of single sign-on (SSO), social registration and authentication allow users to quickly register and authenticate using their existing information from a social networking service, such as Google or Facebook. No more typing out usernames and thinking up passwords.

Healthcare 52

Healthcare Authentication Passwords CISO 52

Duo's Security Blog

NOVEMBER 9, 2020

Let’s face it, these days the information we keep online is too important to safeguard with a username and password — especially with target credential attacks becoming inherently more common. In fact, according to Verizon’s 2020 Data Breach Investigations Report , 80% of security breaches involve compromised passwords.

Passwords 40

Passwords Data breaches Authentication Architecture 40

Thales Cloud Protection & Licensing

JULY 17, 2019

In fact, there’s no way to opt out of the risk. And while your organization may be protected with encryption and authentication tools, what about the third-party lab or billing firm that will eventually possess the data you’re responsible for protecting? A password can be updated. Inoculate with Encryption and Authentication.

Healthcare 101

Healthcare Encryption Data breaches Authentication 101

Duo's Security Blog

JANUARY 28, 2022

Imagine a shift away from logging into a “network” to having security seamlessly built into the network, and multi-factor authentication and authorization continuously performed at the application level on the fly — without users typing passwords. What’s Next?

Authentication 52

Authentication Government DNS Encryption 52

NopSec

MARCH 6, 2020

The protocol provides an inter-process communication mechanism, which facilitates functions such as remote administration and authentication. For authentication, SMB protocol initially relied on LAN Man and NTLM, and was later enhanced to support NTLMv2 and Kerberos authentication. What is SMBMap? Neat, so what now?

Authentication 52

Authentication Penetration Testing Passwords Accountability 52

Thales Cloud Protection & Licensing

SEPTEMBER 30, 2021

“If you look at the most major ransomware attacks that have occurred, basic cyber hygiene could have prevented the vast majority of them, so, killing their ability to move laterally,” Matthew Swenson, chief of the Department of Homeland Security’s (DHS) Cyber Crime Unit at Homeland Security Investigations (HSI), said during a recent webinar.

Ransomware 71

Ransomware Cybersecurity Healthcare Education 71

Cisco Security

AUGUST 26, 2022

It also enhances the threat response capabilities of USM Anywhere by providing orchestration and response actions to isolate or un-isolate hosts based on risks identified in USM Anywhere. Dashlane is a password manager that now supports Duo using Duo SSO. End users can easily access Dashlane and their passwords with SSO from Duo.

Firewall 127

Firewall Authentication Passwords Threat Detection 127

Cisco Security

AUGUST 26, 2021

Only by integrating these tools into your larger security reporting and analytics infrastructure, and by leveraging actionable responses, can one reduce the threat risk to an organization. CyberArk reduces VPN risk with MFA enforcement on any VPN client that supports RADIUS; including Cisco Secure Firewall. Read more here.

Technology 119

Technology Firewall VPN Authentication 119

Security Boulevard

MAY 19, 2023

By Nathan Davis This body of work also appears in the form of a webinar, which can be accessed here. Some answers extended this to incorporate authenticity, utility, and possession (which form the Parkerian Hexad when combined with the CIA triad). What is security?

Accountability 64

Accountability Energy and Utilities Passwords Banking 64