Duo's Security Blog

JUNE 8, 2023

Some of it is positive, but the general consensus is that people don’t love multi-factor authentication (MFA); they see it as a necessary evil at best. That’s why I’m so excited to announce our vision to streamline Duo’s authentication workflows, a feature that will deliver seamless, secure login experiences.

Authentication 118

Authentication VPN System Administration Engineering 118

The Last Watchdog

NOVEMBER 11, 2020

As a tradeoff for enjoying our digital lives, we’ve learned to live with password overload and even tolerate two-factor authentication. But now, at long last, we’re on the brink of eliminating passwords altogether, once and for all. Password tradeoffs Passwords have always been a big pain.

Authentication 118

Authentication VPN Passwords Hacking 118

Cisco Security

AUGUST 24, 2023

Cisco is aware of reports that Akira ransomware threat actors have been targeting Cisco VPNs that are not configured for multi-factor authentication to infiltrate organizations, and we have observed instances where threat actors appear to be targeting organizations that do not configure multi-factor authentication for their VPN users.

Authentication 55

Authentication Ransomware VPN Passwords 55

Security Boulevard

JUNE 11, 2021

Senate committee that the ransomware attack that disrupted fuel distribution to the majority of the eastern United States was caused by attackers stealing a single password that protected the enterprise’s VPN. “In The post Colonial Pipeline Disrupted By Single Password | Avast appeared first on Security Boulevard.

Passwords 98

Passwords VPN Authentication Ransomware 98

Malwarebytes

MAY 20, 2022

A poor password at the highest levels of an organisation can cost a company millions in losses. Recent findings show that half of IT leaders store passwords in shared documents. On top of that, it seems that folks at executive level are not picking good passwords either. Are CEOs naming their passwords after themselves?

Passwords 132

Passwords Password Management Authentication VPN 132

Thales Cloud Protection & Licensing

OCTOBER 28, 2021

Trick or Treat: The Choice is Yours with Multifactor Authentication. Whether you want the ‘trick’ of a malevolent threat actor infiltrating your network by exploiting a compromised password or the ‘treat’ from the peace of mind associated with multifactor authentication, the choice is yours. Fri, 10/29/2021 - 05:29.

Authentication 71

Authentication VPN Passwords Accountability 71

Security Affairs

FEBRUARY 12, 2024

Once they’re in, they can grab your emails, usernames, passwords, and more. They might even lock you out of your own accounts by resetting your passwords. Avoid entering any data if you see a warning message about a site’s authenticity. Most browsers will alert you if a site isn’t secure.

DNS 132

DNS VPN Encryption Passwords 132

Security Affairs

SEPTEMBER 8, 2023

An unauthenticated, remote attacker can exploit the vulnerability to conduct a brute force attack in an attempt to identify valid username and password combinations or an authenticated, remote attacker to establish a clientless SSL VPN session with an unauthorized user. ” reads the advisory published by the IT giant.

Ransomware 139

Ransomware VPN Authentication Hacking 139

Malwarebytes

JULY 2, 2021

Some attacks used known vulnerabilities that allowed remote code execution (RCE), while others started by trying to identify valid credentials through password spraying. The applications in the cluster used TOR and commercial VPN services to avoid revealing their IP addresses. Aim for strong passwords, but plan for bad ones.

Passwords 112

Passwords Authentication Government VPN 112

Malwarebytes

JULY 1, 2021

SMS authentication codes are back in the news, and the word I’d use to summarise their reappearance is “embattled.” ” I can still remember a time where two-factor authentication (2FA), authentication grids, regional lockouts, Yubikeys, and offline authentication apps simply did not exist.

Authentication 97

Authentication Phishing Passwords Mobile 97

Security Affairs

SEPTEMBER 25, 2020

According to SAM Seamless Network , over 200,000 businesses are using Fortigate VPN with default settings, exposing them to the risk of a hack. In response to the spreading of Coronavirus across the world, many organizations deployed VPN solutions, including Fortigate VPN, to allow their employers to work from their homes.

VPN 111

VPN Hacking IoT Advertising 111

Krebs on Security

AUGUST 21, 2020

The advisory came less than 24 hours after KrebsOnSecurity published an in-depth look at a crime group offering a service that people can hire to steal VPN credentials and other sensitive data from employees working remotely during the Coronavirus pandemic. authenticate the phone call before sensitive information can be discussed.

VPN 355

VPN Social Engineering Authentication Engineering 355

Webroot

APRIL 2, 2024

A brute force attack is a cyber attack where the attacker attempts to gain unauthorized access to a system or data by systematically trying every possible combination of passwords or keys. There are many already leaked password lists that are commonly used, and they grow after every breach. What is a Brute Force Attack?

Cybersecurity 84

Cybersecurity Passwords VPN Authentication 84

The Last Watchdog

MARCH 6, 2021

Use strong passwords. It is essential to ensure that all accounts are protected with strong passwords. To this day, a significant amount of people still use the password across multiple accounts, which makes it much simpler for a cybercriminal to compromise a password and take over accounts. Secure home router.

VPN 212

VPN Firewall Antivirus Passwords 212

Malwarebytes

FEBRUARY 7, 2024

The script on that site looks at your IP address, your type of machine and whether you are using a VPN. Unfortunately when I set my VPN to pretend I was located in Germany, the script identified it as an anonymous proxy and stopped there. Simply changing the password is not always enough. Click your profile picture.

Scams 135

Scams Passwords Identity Theft Accountability 135

CyberSecurity Insiders

MAY 4, 2023

1. Use Strong Passwords: Strong passwords are the first line of defense against hackers. Avoid using easy-to-guess passwords like “123456” or “password.” Also, use different passwords for different online accounts. If you must use public Wi-Fi, use a VPN to encrypt your traffic.

VPN 106

VPN Passwords Scams Accountability 106

Security Affairs

JANUARY 13, 2024

.” The ransomware attack reported in late 2023, targeted organizations’ networks using poorly secured VPN gateway on Cisco ASA or FTD devices. Rapid7 researchers, they noticed that threat activity targeting Cisco ASA SSL VPN appliances dates back to at least March 2023.

Ransomware 120

Ransomware Backups VPN Authentication 120

Malwarebytes

AUGUST 28, 2023

The Cisco Product Security Incident Response Team (PSIRT) has posted a blog about Akira ransomware targeting VPNs without Multi-Factor Authentication (MFA). The Cisco team states that it is aware of reports of the Akira ransomware group going specifically after Cisco VPNs that are not configured for MFA.

Ransomware 81

Ransomware VPN Passwords Backups 81

CyberSecurity Insiders

JUNE 5, 2023

Use Strong and Unique Passwords : One of the most basic yet critical steps is to create strong, unique passwords for your online accounts. Additionally, employ a password manager to securely store and generate unique passwords for each account. This helps prevent unauthorized access even if your password is compromised.

Passwords 126

Passwords Encryption Media Banking 126

Security Affairs

APRIL 28, 2024

From March 18, 2024, to April 16, 2024, Duo Security and Cisco Talos observed large-scale brute-force attacks against a variety of targets, including VPN services, web application authentication interfaces and SSH services.

VPN 68

VPN Accountability Firewall Data breaches 68

Security Affairs

APRIL 26, 2019

One in four internet users use a VPN regularly, but how much does the average user know about what goes on behind the software? Pulling back the curtain, a VPN runs on various VPN protocols that govern the way a VPN client communicates with a VPN server. However, the speed comes at the cost of encryption.

VPN 95

VPN Encryption Firewall Internet 95

Dark Reading

JUNE 8, 2021

No multi-factor authentication was attached to the stolen VPN password used by the attackers, Colonial Pipeline president & CEO Joseph Blount told a Senate committee today.

VPN 44

VPN Accountability Authentication Passwords 44

Krebs on Security

NOVEMBER 21, 2020

“At this moment in time, it looks like no emails, passwords, or any personal data were accessed, but we do suggest resetting your password and activate 2FA security,” the company wrote in a blog post. Restrict VPN access hours, where applicable, to mitigate access outside of allowed times.

Cryptocurrency 363

Cryptocurrency VPN Scams Social Engineering 363

SecureList

APRIL 22, 2024

Diagram of SSH tunnel creation SoftEther VPN The next tool that the attackers used for tunneling was the server utility (VPN Server) from the SoftEther VPN package. To launch the VPN server, the attackers used the following files: vpnserver_x64.exe IP Country + ASN Net name Net Description Address Email 103.27.202[.]85

VPN 105

VPN Passwords Encryption Malware 105

Krebs on Security

FEBRUARY 26, 2023

million customers, including website administrator passwords, sFTP credentials, and private SSL keys; -December 2022: Hackers gained access to and installed malware on GoDaddy’s cPanel hosting servers that “intermittently redirected random customer websites to malicious sites.”

Hacking 253

Hacking Social Engineering Phishing Scams 253

Security Affairs

JANUARY 13, 2024

.” The ransomware attack reported in late 2023, targeted organizations’ networks using poorly secured VPN gateway on Cisco ASA or FTD devices. Rapid7 researchers, they noticed that threat activity targeting Cisco ASA SSL VPN appliances dates back to at least March 2023.

Ransomware 97

Ransomware Backups VPN Authentication 97

Security Affairs

OCTOBER 9, 2023

The company added that successful exploitation requires that the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server. X-Force discovered the campaign while conducting an incident response activity for a client that had reported slow authentications on the NetScaler install.

VPN 119

VPN Authentication Cyber Attacks Passwords 119

CSO Magazine

JUNE 23, 2021

With the recent Colonial Pipeline attack , the initial infection point was reportedly an old, unused, but still open VPN account. The password had been found on the dark web rather than obtained via phishing , implying that it had been leaked or reused by a Colonial employee.

VPN 117

VPN Accountability Phishing Authentication 117

CyberSecurity Insiders

APRIL 1, 2022

Such devices are now on the verge of being targeted by cyber attacks, says Cybersecurity and Infrastructure Security Agency (CISA) of America, especially those that are being operated with the default username and passwords. Their default passwords offered by the manufacturer should be changed to something tricky, say experts. .

Cyber threats 110

Cyber threats Internet Internet Energy and Utilities 110

eSecurity Planet

OCTOBER 1, 2021

The National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) have released guidance and best practices for securing virtual private network (VPN) solutions. What might be most striking about the document is how many security steps and solutions it takes to properly secure VPN connections.

VPN 88

VPN Authentication Passwords Software 88

Heimadal Security

OCTOBER 14, 2022

MFA, or multi-factor authentication, is a security technique that requires users to verify their identities by offering multiple forms of identification before being granted access to a resource such as an application, online account, website, or VPN.

VPN 90

VPN Authentication Passwords Accountability 90

Approachable Cyber Threats

OCTOBER 5, 2023

Use strong passwords : Choosing a robust password that cannot be easily guessed is one of the most important actions that can be taken. It is recommended that you use a password that is at least eight characters long ( check out our Password Table for why you should select a strong password). ❯

Passwords 106

Passwords Identity Theft VPN Authentication 106

Webroot

FEBRUARY 26, 2024

They’ll try to sweet-talk you into clicking on suspicious links or divulging sensitive information like passwords or credit card details. Your 7 tips to stay safe online Use strong passwords Let’s kick things off with the basics. Remember: real companies don’t ask for your personal data via email.

Scams 100

Scams VPN Passwords Phishing 100

Krebs on Security

JULY 10, 2022

In both cases the readers used password managers to select strong, unique passwords for their Experian accounts. Turner said he created the account at Experian in 2020 to place a security freeze on his credit file, and that he used a password manager to select and store a strong, unique password for his Experian account.

Accountability 305

Accountability Passwords Authentication Password Management 305

Krebs on Security

AUGUST 19, 2020

But one increasingly brazen group of crooks is taking your standard phishing attack to the next level, marketing a voice phishing service that uses a combination of one-on-one phone calls and custom phishing sites to steal VPN credentials from employees. The employee phishing page bofaticket[.]com. Image: urlscan.io. ” SPEAR VISHING.

Phishing 353

Phishing VPN Social Engineering Media 353

Malwarebytes

FEBRUARY 19, 2024

The attacker managed to authenticate to an internal virtual private network (VPN) access point, further navigate the victim’s on-premises environment, and execute various lightweight directory access protocol (LDAP) queries against a domain controller. Use phishing-resistant multifactor authentication (MFA).

Accountability 73

Accountability VPN Authentication Phishing 73

Cisco Security

AUGUST 4, 2021

Zero Trust principles help protect against identity and access-based security risks by requiring all users, whether inside or outside the organization’s network, to be authenticated, authorized, and continuously validated for security configuration and posture checks before granted access to applications and data. Facebook.

Authentication 121

Authentication Architecture Passwords Cyber Risk 121