Malwarebytes

MAY 7, 2023

Upcoming webinar: Is EDR or MDR better for your business? Google Authenticator WILL get end-to-end encryption. Eventually.

Small Business 82

Small Business Social Engineering Passwords Mobile 82

Security Boulevard

JULY 6, 2023

It's no secret that the bad guys are training their artificial intelligence (AI) engines to crack passwords, perform account takeovers (ATO), and automate their ransomware demands. In fact, they are using AI to not only predict your users' current passwords. Mind blown!

Artificial Intelligence 103

Artificial Intelligence Passwords Authentication Accountability 103

Duo's Security Blog

SEPTEMBER 16, 2021

At Duo, we're building a passwordless authentication solution that’s as easy to set up as it is to use – with our world-class security baked in. Your Journey Begins with Multi-Factor Authentication See the video at the blog post. On your path to passwordless, it’s key to separate fact from fiction around biometrics, PINs and passwords.

Authentication 93

Authentication Passwords Phishing CISO 93

Troy Hunt

SEPTEMBER 7, 2018

It's been a week of travel for me with API Days in Melbourne on Tuesday, Fortinet Fast & Secure in Sydney on Wednesday then the Varonis webinar yesterday (recorded, I'll share once it's online). Be that as it may, I did manage to pump out a long-awaited blog post on the total cost of running Pwned Passwords in HIBP and its.

Spyware 113

Spyware Authentication Passwords Hacking 113

Security Boulevard

FEBRUARY 14, 2022

Customers end up calling help desks for multiple reasons, including to reset their passwords and manage their profile, privacy, and data sharing settings. For example, allowing customers to manage and reset their usernames and passwords alone can save enterprises millions of dollars annually. Learn More In Our Webinar.

Passwords 97

Passwords Retail Digital transformation Risk 97

Duo's Security Blog

JULY 15, 2021

Yes, it’s a password-less authentication method, greatly streamlining the login experience, and while that’s a great incentive to use passwordless for logging in, it’s not an improvement in authentication security in and of itself. That isn’t to say that every password-less solution needs to be phish-proof.

Phishing 95

Phishing Authentication Passwords Risk 95

CyberSecurity Insiders

APRIL 10, 2023

Time to time, we have corporate self-paced training to ensure we are adhering to standards.” – Neeraj Vijay, CISSP Chinatu Uzuegbu, CISSP recommends Online/Virtual Trainings/Webinars Face-to-face knowledge sharing with demonstrations. Batch training for the Identity Management key players.

Identity Theft 105

Identity Theft Education Authentication Data breaches 105

NopSec

FEBRUARY 28, 2024

Finally, we cover a Microsoft Exchange privilege escalation vulnerability that could enable motivated threat actors to steal your NTLM password hash. The attack chain is pretty interesting, but does require authenticated access. Fill up your coffee and drop to a command line as we cover the trending CVEs of February. So, patch now!

Authentication 59

Authentication Accountability Passwords Risk 59

Chicago CyberSecurity Training

JULY 1, 2023

Use Strong Passwords and Multi-Factor Authentication (MFA): One of the most important steps to securing your business is to use strong pass phrases for your accounts. Additionally, enable multi-factor authentication (MFA) when possible. Avoid using pass words (ex. Visit us at SouthsideCHISolutions.com to learn more!

Cybersecurity 40

Cybersecurity Backups Social Engineering Passwords 40

SecureWorld News

SEPTEMBER 29, 2022

For Amazon, cybersecurity is a top priority, said Jenny Brinkley, Director, Amazon Security, who was one of the webinar panelists. Another theme touched on in the webinar was to m ake awareness education easy, like you're talking to a teenager: "I like to think about how I explain this to my own family," Shou said. Updating software.

Cybersecurity 67

Cybersecurity Education Security Awareness Password Management 67

Duo's Security Blog

FEBRUARY 6, 2024

Traditionally, credentials (such as usernames, passwords or security tokens) have been the gatekeepers of access. This way, IT Administrators can quickly address any security gaps by migrating from weak authentication to strong, phishing-resistant, multi-factor passwordless deployments across a customer’s entire enterprise stack.

Accountability 75

Accountability Authentication Risk Marketing 75

SecureWorld News

JULY 21, 2020

The inclusion of authentic content also makes it harder for spam filters to detect the emails as malicious. It steals usernames and passwords for outgoing email servers. Check out our webinar on phishing, "Phishing Attacks Are Becoming More Evolved: How to Eradicate Them.". But that's not all.

Phishing 61

Phishing Banking Authentication Passwords 61

Duo's Security Blog

SEPTEMBER 1, 2023

"Based on FIDO standards, passkeys are a replacement for passwords that provide faster, easier, and more secure sign-ins to websites and apps across a user’s devices. Unlike passwords, passkeys are always strong and phishing resistant. The FIDO Alliance asserts that passkeys are a replacement for passwords.

Passwords 97

Passwords Authentication Insurance Cyber Insurance 97

Duo's Security Blog

MAY 6, 2024

The security industry has diligently battled compromised credentials, evolving from passwords to multifactor authentication (MFA) to passwordless — our most secure and phishing-resistant method to date — and one that is fully supported in Duo. This means there are serious holes in our authentication armor today.

Authentication 93

Authentication Accountability VPN Phishing 93

Duo's Security Blog

APRIL 20, 2023

In many rnodern phishing attacks, malicious links send employees to copies of otherwise farniliar websites—like an internal payroll portal login page where it’s quick to muscle-rnemory a username and password. Duo’s enrollment and authentication processes made it easy for even the most anti-tech users to get up and running with MFA.

Phishing 64

Phishing Social Engineering Authentication Engineering 64

Duo's Security Blog

SEPTEMBER 4, 2023

And when it comes to managing access for this plethora of devices, password security just isn’t cutting it anymore. In our recent passkey blog series , we’ve been unpacking the difference between new passkey technology and more conventional password security in light of some of the most critical authentication scenarios.

Passwords 72

Passwords Authentication Accountability Password Management 72

Thales Cloud Protection & Licensing

JULY 20, 2023

Protecting Against Smart Device Break-Ins This story also demonstrates the sobering reality that we can no longer solely rely on Usernames/Passwords to protect our networks. To learn more, please consider attending our upcoming webinar featuring DigiCert’s Anthony Ricci, Senior Director of Product Management for Emerging Markets.

Manufacturing 48

Manufacturing Computers and Electronics IoT Authentication 48

BH Consulting

AUGUST 9, 2022

Many professionals agree multi-factor authentication (MFA) can improve security, but a recent discovery showed that it’s no panacea either. The ongoing campaign has targeted more than 10,000 Office 365 organisations since September 2021, using ‘adversary in the middle’ (AiTM) sites to steal passwords and hijack login sessions.

Cybercrime 52

Cybercrime Accountability Phishing Authentication 52

Thales Cloud Protection & Licensing

FEBRUARY 24, 2021

Overview of Authentication Mechanisms. In this regard, continuously authenticating users who are accessing corporate resources helps maintain trust in distributed IT environments. Let us examine some of the most prominent authentication mechanisms before we move on to the emerging continuous access evaluation protocol (CAEP) standard.

Authentication 87

Authentication Mobile Passwords Software 87

Cisco Security

NOVEMBER 2, 2022

Going beyond the hype, passwordless authentication is now a reality. Cisco Duo’s passwordless authentication is now generally available across all Duo Editions. “ Cisco Duo simplifies the passwordless journey for organizations that want to implement phishing-resistant authentication and adopt a zero trust security strategy.

Authentication 110

Authentication Passwords Phishing Mobile 110

Malwarebytes

OCTOBER 8, 2021

While there are countless ways to interpret exactly how to “be cyber smart”—like adopting cybersecurity best practices around strong password use , two-factor authentication , and remote desktop protocol ports —we at Malwarebytes Labs wanted to take a step back and consider: How do you train people to be cyber smart in the first place?

Cybersecurity 88

Cybersecurity Security Awareness Education Authentication 88

Security Boulevard

JUNE 22, 2023

It is the first in a series released after each episode of our webinar series called What is Tier Zero. In that case, the host is in control of the user because the host is in possession of the user’s Kerberos tickets, NT hash, and maybe even cleartext password in some cases. A more straightforward example is hardware.

Backups 57

Backups Accountability Passwords Authentication 57

Thales Cloud Protection & Licensing

DECEMBER 2, 2021

What is Modern Authentication and Its Role in Achieving Zero Trust Security? The evolving business and technology landscape and the need for secure, yet convenient, ways of logging into applications are driving the quest for more effective authentication. From static authentication…. to dynamic, context based authentication.

Authentication 125

Authentication Passwords Risk Mobile 125

CyberSecurity Insiders

MAY 19, 2023

While multi-factor authentication (MFA) generally protects against common methods of gaining unauthorized account access, not all multi-factor authentication methods can defend against sophisticated attacks. Authentication establishes confidence that the claimant has possession of one or more authenticators bound to the credential.

Phishing 109

Phishing Authentication Passwords Social Engineering 109

Duo's Security Blog

JULY 1, 2021

Tall Tale #1: PINs Are Just Passwords In Part 1 , we talked about how passwordless authentication is still multi-factor: Possession of a private key, ideally stored on a piece of secure hardware A biometric or PIN the authenticator uses to locally verify the user’s identity Reasoning about a PIN being used as a factor is simpler than a biometric.

Passwords 69

Passwords Surveillance Authentication Risk 69

Thales Cloud Protection & Licensing

OCTOBER 13, 2022

Thales and Microsoft partner to provide Azure customers with FIDO and CBA phishing-resistant authentication. The impact and cost of cyber-attacks have skyrocketed, driving the need for better identity protection with phishing-resistant Multi-Factor Authentication (MFA). Microsoft Azure Certificate-Based Authentication Support.

Authentication 127

Authentication Phishing Digital transformation Government 127

NopSec

FEBRUARY 15, 2017

What if the recipient is in a hurry and under a lot of stress – will they be aware of how sophisticated and authentic-looking a well-crafted whaling attack can be? A well-crafted spear phishing attack can be extremely difficult to detect because attackers perform detailed research on their victims to make the email appear authentic.

Phishing 40

Phishing Social Engineering Engineering Healthcare 40

Duo's Security Blog

OCTOBER 6, 2023

Threat actors have dramatically escalated their attacks – targeting security controls like multi-factor authentication (MFA), conducting wily social engineering attacks and extorting businesses large and small with ransomware. Since then, teams have had years to adjust to this new reality, yet the attackers have as well.

Authentication 112

Authentication Risk Social Engineering InfoSec 112

Duo's Security Blog

NOVEMBER 20, 2023

One piece of evidence to support this hypothesis is the low adoption of a basic security control that protects against identity-based attacks - multi-factor authentication (MFA). Add to this, the risks of weak authentication factors such as SMS one-time passcodes and dormant or inactive accounts.

Threat Detection 134

Threat Detection Authentication Accountability Data breaches 134

Security Boulevard

JULY 21, 2023

This is why it's critical to secure your user identities and passwords and the IAM services that manage them. Multi-factor authentication (MFA) : MFA requires users to provide more than one form of identification to access a system or application. From there, they can find high-value data to steal, hold for ransom, expose, or sell.

Threat Detection 98

Threat Detection Authentication Passwords Accountability 98

Duo's Security Blog

FEBRUARY 11, 2022

To help you make the most of this new offering, Duo Product Manager Chris Demundo and Product Marketing Manager Ted Kietzman recently hosted the webinar Ask Us Anything: Passwordless Tips & Tricks , answering passwordless questions crowdsourced from our Duo Community public forum. What is passwordless authentication?

Authentication 74

Authentication Passwords Mobile Risk 74

Duo's Security Blog

JULY 6, 2023

Today we will discuss the survey makeup, review key results and explain why Duo’s Passwordless technology is well positioned to meet enterprise authentication needs highlighted in the study. Workforce authentication failures are common and MFA is still not mandatory Duo has always focused on meeting customers where they are.

Authentication 61

Authentication Passwords Risk Technology 61

Duo's Security Blog

JULY 29, 2021

If you’re considering passwordless authentication for your organization today, you’ve probably been thinking for a while about a holistic authentication strategy. Passwordless is a leap forward on the path to a strong and usable authentication system, consisting of many individual steps that you must navigate.

Authentication 54

Authentication Passwords Accountability Manufacturing 54

Duo's Security Blog

NOVEMBER 6, 2023

Passwords that are easily detectable or reused often are vulnerable to phishing attacks. This lowers the number of passwords users must remember (or re-use, as is often the case). The problem with balancing many identities Conventional passwords create separate lines for each account. What is a credential stuffing attack?

Passwords 74

Passwords Authentication Risk Technology 74

Duo's Security Blog

MARCH 9, 2022

Together these practices — which include multi-factor authentication (MFA), restricting administrative privileges and daily backups — provide a clear framework for businesses anywhere that are looking to improve their foundational security footing , as we’ve previously noted on the Duo Blog.

Cybersecurity 66

Cybersecurity Authentication Passwords VPN 66

Duo's Security Blog

OCTOBER 11, 2023

To learn more about how Duo’s access management trifecta empowers you to authenticate further and defend faster, be sure to tune into our webinar Authenticate Further, Defend Faster with Higher Security from Duo. Forget coming up with a password that will eventually, inevitably find its way onto the dark web.

Authentication 95

Authentication Risk Technology Phishing 95

Duo's Security Blog

OCTOBER 20, 2021

Passwordless authentication is one of the biggest trends in security this year. We truly believe that passwordless authentication will be a sea change that simultaneously enables stronger security while making it easier for users to login. Naturally, at Duo we believe in the power of multi-factor authentication.

Education 52

Education Authentication Passwords CISO 52