Duo's Security Blog

JUNE 8, 2023

Some of it is positive, but the general consensus is that people don’t love multi-factor authentication (MFA); they see it as a necessary evil at best. Here at Duo, we’ve long been proponents of the idea that security and end user experience go hand in hand, and we work hard to develop the technologies that make that happen.

Authentication 144

Authentication VPN System Administration Engineering 144

Adam Levin

MARCH 19, 2020

It Can Add Another Factor of Authentication: Multi-factor authentication isn’t perfect, but it does help add an extra layer of security to your network. You Can Restrict Access To Company Data: Restricting access to a VPN to current employees means it’s easier to spot a usage anomaly. The post Remote Workforce?

VPN 130

VPN Firewall Authentication Passwords 130

Security Affairs

JANUARY 16, 2024

Experts warn that recently disclosed Ivanti Connect Secure VPN and Policy Secure vulnerabilities are massively exploited in the wild. is an Authentication Bypass issue that resides in the web component of Ivanti ICS 9.x, The flaw CVE-2023-46805 (CVSS score 8.2) x and Ivanti Policy Secure. x) and Ivanti Policy Secure.

VPN 130

VPN Authentication Small Business Telecommunications 130

eSecurity Planet

NOVEMBER 4, 2021

We use passwords to authenticate our users, run antivirus to keep malware off our endpoints , monitor our networks, and implement firewalls so we can have multiple defenses against attackers. All these technologies can present security challenges, which makes zero trust principles important in any remote access solution.

VPN 124

VPN Firewall Encryption Passwords 124

SecureWorld News

MAY 28, 2024

Threat actors are targeting Check Point Remote Access VPN devices in an ongoing campaign to breach enterprise networks, the company has warned in a new advisory. We have recently witnessed compromised VPN solutions, including various cyber security vendors.

VPN 109

VPN Passwords Authentication Architecture 109

Security Affairs

APRIL 26, 2019

One in four internet users use a VPN regularly, but how much does the average user know about what goes on behind the software? Pulling back the curtain, a VPN runs on various VPN protocols that govern the way a VPN client communicates with a VPN server. However, the speed comes at the cost of encryption.

VPN 111

VPN Encryption Firewall Internet 111

Security Affairs

JULY 29, 2022

Therefore, strong authentication methods are needed. Therefore, strong authentication methods are needed to improve security without hindering user convenience. What is Strong Authentication? The IAM Security Boundary Strong authentication is a critical component of modern-day identity and access management.

Authentication 127

Authentication Passwords Data privacy Identity Theft 127

Security Affairs

JANUARY 31, 2024

Threat actors are exploiting recently disclosed zero-day flaws in Ivanti Connect Secure (ICS) VPN devices to deliver KrustyLoader. is an Authentication Bypass issue that resides in the web component of Ivanti ICS 9.x, The flaw CVE-2023-46805 (CVSS score 8.2) x and Ivanti Policy Secure. x) and Ivanti Policy Secure.

VPN 129

VPN Malware Authentication Small Business 129

The Last Watchdog

SEPTEMBER 26, 2023

26, 2023 — The Internet Infrastructure Coalition (i2Coalition) launched the VPN Trust Initiative (VTI) in 2020 to establish a baseline for how virtual private network (VPN) providers should operate. Advertising Practices: Given the complexity and different use cases for VPNs, claims must not mislead.

VPN 100

VPN Internet Internet Technology 100

eSecurity Planet

JUNE 22, 2022

However, many of these VPN solutions have three significant issues. First, VPNs can be difficult to set up, secure and maintain. Second, VPNs do not scale well and can become congested. Users might decide to bypass the hassle of VPNs and access those cloud resources directly without any additional security protection.

VPN 110

VPN Authentication Small Business Encryption 110

Malwarebytes

JULY 28, 2021

Researchers at RandoriSec have found serious vulnerabilities in the firmware provided by UDP Technology to Geutebrück and many other IP camera vendors. According to the researchers the firmware supplier UDP Technology fails to respond to their reports despite numerous mails and LinkedIn messages. History lessons.

Firmware 129

Firmware Technology Authentication IoT 129

eSecurity Planet

AUGUST 27, 2024

A virtual private network (VPN) does more than just mask your identity—it fundamentally changes how your data moves across the internet. But what’s really going on under the hood when you browse the web using a VPN? This process involves multiple steps and technologies working together to ensure your data remains private and secure.

VPN 104

VPN Encryption Internet Internet 104

eSecurity Planet

DECEMBER 23, 2020

Many organizations have used VPNs for years to provide seamless connectivity without compromising security for employees who travel or work remotely. These VPN endpoints are typically set up to support 5 to 10 percent of a company’s workforce at any given time. Enhance VPN Security. Add New VPNs to Support Increased Demand.

VPN 105

VPN DNS Authentication Mobile 105

Krebs on Security

JUNE 15, 2023

The directive applies to any networking devices — such as firewalls, routers and load balancers — that allow remote authentication or administration. The researchers found that just being able to reach the management interface for a vulnerable Fortinet SSL VPN appliance was enough to completely compromise the devices.

Risk 279

Risk VPN Internet Internet 279

Cisco Security

AUGUST 26, 2021

With the addition of Kenna Security into our program we now have over 250 technology partners and over 400 integrations for our mutual customers to utilize. An integration with Cigent Technology is now available for Secure Endpoint customers to integrate with. Kenna has a healthy 3rd Party ecosystem of technology partners.

Technology 143

Technology Firewall VPN Authentication 143

The Last Watchdog

MARCH 6, 2021

Technology advancements have made it relatively easy for many employees to carry out their regular job duties from the comfort of their home. Set-up 2-factor authentication. Two-factor authentication or two-step verification involves adding a step to add an extra layer of protection to accounts.

VPN 214

VPN Firewall Risk Antivirus 214

Krebs on Security

MAY 19, 2020

” Alex Holden , chief technology officer and founder of Milwaukee-based Hold Security , said Sanixer’s claim to infamy was simply for disclosing the Collection #1 data, which was just one of many credential dumps amalgamated by other cyber criminals. By far the most important passwords are those protecting our email inbox(es).

Passwords 363

Passwords Accountability Hacking Password Management 363

Duo's Security Blog

MAY 23, 2024

When reading the title of this blog, you might be wondering to yourself why RADIUS is being highlighted as a subject — especially amidst all of the advancements of modern authentication we see taking place recently. It is commonly used for network access into VPNs, wireless access points, and other devices (more on this later).

Authentication 111

Authentication Wireless Passwords Encryption 111

eSecurity Planet

OCTOBER 28, 2024

The attacker must be authenticated and have Site Owner permissions to conduct the attack, but with those, they could inject and execute arbitrary code in SharePoint Server contexts. The problem: Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) both have a vulnerability in their Remote Access VPN service.

Phishing 103

Phishing Authentication Software VPN 103

Approachable Cyber Threats

SEPTEMBER 30, 2021

You can’t access that app someone mentioned, so you ask them and they tell you to “just use the VPN.” And why can you access the app after using the VPN, but you couldn’t before? A Virtual Private Network, or VPN, is a technology that allows you to connect your device to another IT network. This is where a VPN comes in.

VPN 98

VPN Computers and Electronics Internet Internet 98

Security Affairs

DECEMBER 5, 2019

Researchers discovered a vulnerability tracked as CVE-2019-14899 that can be exploited to hijack active TCP connections in a VPN tunnel. The experts explained that in this way, it is possible to hijack active connections within the VPN tunnel. ” reads the advisory published by the experts. Pierluigi Paganini.

VPN 98

VPN Encryption Advertising Authentication 98

Security Boulevard

JUNE 9, 2021

A simple technology invented by Bell Labs over 20 years ago (and widely used today) could have prevented the Colonial Pipeline attack. In 1998, I joined AT&T Labs , which was a research group that the company retained when they spun out most of Bell Labs to Lucent Technologies in 1996. Not much has changed in 23 years.

Authentication 93

Authentication Passwords Technology Phishing 93

Krebs on Security

APRIL 6, 2022

Since surfacing in late 2021, LAPSUS$ has gained access to the networks or contractors for some of the world’s largest technology companies, including Microsoft , NVIDIA , Okta and Samsung. ” My CXO source said LAPSUS$ succeeds because they simply refuse to give up, and just keep trying until someone lets them in.

Social Engineering 293

Social Engineering Phishing Accountability Engineering 293

Cisco Security

NOVEMBER 9, 2021

Organizations sustained and thrived in the recent past by rapidly adopting digital transformation technologies and adapting to remote work. The New Duo Authentication Experience . As we onboard 50+ SaaS applications, we’re finding the Universal Prompt simplifies authentication options, while providing a consistent. is helpful.

VPN 144

VPN Authentication Digital transformation Technology 144

Krebs on Security

OCTOBER 21, 2019

Antivirus and security giant Avast and virtual private networking (VPN) software provider NordVPN each today disclosed months-long network intrusions that — while otherwise unrelated — shared a common cause: Forgotten or unknown user accounts that granted remote access to internal systems with little more than a password.

Accountability 175

Accountability VPN Software Antivirus 175

The Last Watchdog

MAY 23, 2022

They require integrity, authentication, trusted identity and encryption. Protocols and policies setting new parameters for trusted connections are being hammered out and advanced encryption, authentication and data protection solutions are being ramped up. Related: Leveraging PKI to advance electronic signatures. Trust under siege.

Cybersecurity 214

Cybersecurity Computers and Electronics Digital transformation Encryption 214

Cisco Security

AUGUST 4, 2021

Zero Trust principles help protect against identity and access-based security risks by requiring all users, whether inside or outside the organization’s network, to be authenticated, authorized, and continuously validated for security configuration and posture checks before granted access to applications and data. The Move to Passwordless.

Authentication 145

Authentication Architecture Passwords Cyber Risk 145

SecureWorld News

NOVEMBER 12, 2024

These vulnerabilities span a range of technologies, from network security appliances to widely used software applications. CVE-2023-27997 (Fortinet FortiOS and FortiProxy SSL-VPN): A remote user can craft specific requests to execute arbitrary code or commands. CVE-2020-1472 (Microsoft Netlogon): Allows privilege escalation.

Software 112

Software Cyber threats Risk Passwords 112

Security Affairs

FEBRUARY 16, 2024

The threat actor compromised network administrator credentials through the account of a former employee that was used to successfully authenticate to an internal virtual private network (VPN) access point. Neither of the two administrative accounts had multifactor authentication (MFA) enabled.

Government 144

Government VPN Accountability Authentication 144

Duo's Security Blog

JANUARY 27, 2022

Not all multi-factor authentication (MFA) solutions are equal. For a two-factor authentication solution, that may include hidden costs, such as upfront, capital, licensing, support, maintenance, and operating costs. John Bryant, Chief Technology Officer, Options Technology Ltd.

Authentication 104

Authentication Software Mobile Passwords 104

Adam Levin

NOVEMBER 15, 2019

News that Virtual Private Network ( VPN ) provider NordVPN was breached spread quickly. While the breach of a major VPN service is newsworthy, this one wasn’t particularly. But one of the watchwords of good cyber hygiene, a VPN, was breached. Who Is Using VPNs? The incident put NordVPN in the hot seat.

VPN 114

VPN Cybersecurity Firewall Data breaches 114

CyberSecurity Insiders

MARCH 21, 2021

With a VPN like Surfshark to encrypt your online traffic and keep it protected against any security breach, your valuable data isn’t going to get compromised easily anytime soon. Most small business owners consider IP infrastructure as a one-time expense and dont bother replacing it with new technology. Two-factor authentication .

Small Business 145

Small Business Cyber Attacks VPN Backups 145

CSO Magazine

MARCH 20, 2023

ForegeRock is adding a new passwordless authentication capability, called Enterprise Connect Passwordless, to its flagship Identity Platform product to help eliminate the need for user passwords in large organizations. To read this article in full, please click here

Authentication 68

Authentication VPN Mobile Passwords 68

SecureWorld News

NOVEMBER 12, 2024

The tactics: stolen identities, remote work, and laptop farms As Grimes outlined, these operatives leverage stolen or fictitious identities to obtain roles as remote contractors, primarily targeting technology and cybersecurity firms. This includes verifying U.S.-based

Government 102

Government VPN Cyber threats Education 102

SC Magazine

MARCH 1, 2021

In response, criminal and state-backed hacking groups stepped up their own exploitation of the technology as well. A recent report from Zscaler found that VPNs are still overwhelmingly popular: 93% of companies surveyed reported that they have used them in some capacity.

VPN 128

VPN Technology Marketing Architecture 128

Duo's Security Blog

APRIL 7, 2021

Those wonderful words of ‘Denied Access’ appear in your browser; you need to connect to the corporate VPN to access your pay stub. If you are like me, you sigh, and put your machine to sleep because the workflow for your VPN requires far too much effort for something that should be a simple and quick process.

VPN 80

VPN Password Management Authentication Architecture 80

eSecurity Planet

FEBRUARY 6, 2025

Single sign-on” (SSO) is an authentication method that allows users to enter one set of authentication credentials to access multiple websites, applications, and services. The goal of SSO is to streamline the authentication process by eliminating the need to enter different usernames and passwords for each resource.

Authentication 58

Authentication Passwords Mobile Encryption 58