Duo's Security Blog

JANUARY 25, 2023

target insecure TLS versions, increasing organizational risks in exposing both their own and their users’ valuable data, potentially incurring major financial penalties and legal liabilities. Duo is here to help you For customers starting their zero-trust network access (ZNTA) journey with Duo multi-factor authentication (MFA) , TLS 1.0

Encryption 95

Encryption Technology Risk Authentication 95

IT Security Guru

JULY 4, 2023

Hackers are increasingly targeting schools as technology is being integrated more deeply into teaching. Educational institutions own many sensitive data, such as personnel and financial information, as well as intellectual property. Cybercriminals use these weaknesses to break into school networks and compromise critical data.

Education 100

Education Passwords Backups IoT 100

Duo's Security Blog

AUGUST 24, 2022

It’s never been more important to protect our children against cybercrimes. estimated that 44% of educational institutions were targeted by ransomware attacks in 2020 — more data breaches than we’d ever seen in prior years. However, adding two-factor or multi-factor authentication (MFA) cybersecurity may be a good place to start.

Cybersecurity 52

Cybersecurity Education Insurance Authentication 52

Centraleyes

APRIL 22, 2024

Background to FISMA The need for standardized categorization of information and information systems based on impact levels emerged from recognizing that not all systems and information have the same value or require security protection. Moderate potential impact from a loss of integrity.

Risk 52

Risk Information Security Encryption Cybersecurity 52

Duo's Security Blog

MARCH 2, 2022

Here’s how bad actors are circumventing MFA protection, and 11 ways Duo can help you strengthen your security posture beyond standard MFA. However, while implementing MFA decreases the risk of account compromise by 99.9% , there will always be bad actors looking to break through even the most robust defenses.

Authentication 100

Authentication Phishing DNS Passwords 100

Duo's Security Blog

NOVEMBER 27, 2023

That’s why we prioritize the development of secure configurations within Duo, and support integrations with the rest of your security stack. MFA Fatigue MFA fatigue attacks ( T1621 ), which have become increasingly common, occur when adversaries send a barrage of MFA requests to users in an effort to exhaust them into providing access.

Authentication 69

Authentication Social Engineering Risk Accountability 69

Centraleyes

APRIL 23, 2024

This strategic mindset ensures that technology integration goes beyond short-term gains, setting the stage for sustained success. Enhanced Customer Experience and Personalization The power of data-driven personalization enhances customer experiences, fostering stronger connections between businesses and their clientele.

Risk 52

Risk Technology Artificial Intelligence Data privacy 52

Thales Cloud Protection & Licensing

MAY 16, 2022

In a previous blog post, I discussed how The White House Executive Order issued on May 12, 2021 laid out new, rigorous government cyber security standards for federal agencies. Protect – Encrypt data at rest and in-flight without costly performance impact. Identification of Unclassified Data. MFA and Encryption.

Cybersecurity 87

Cybersecurity Encryption Architecture Technology 87

Duo's Security Blog

NOVEMBER 23, 2020

Users have left the building, and it's up to your security team to make sure they are protected on any device, wherever and whenever they choose to work. How do you protect your users from phishing attacks? Start with a zero-trust framework that begins at the access request with strong multi-factor authentication (MFA).

Authentication 76

Authentication Passwords Technology Education 76

CyberSecurity Insiders

JANUARY 6, 2022

This blog was written by an independent guest blogger. Did you know that human error is the main culprit of 95% of data breaches ? They could expose your sensitive data and put you, your employees, clients, and customers at risk of identity theft and fraud. How to protect your transactions. No cybersecurity experts.

Encryption 134

Encryption Identity Theft Authentication Data breaches 134

Duo's Security Blog

JUNE 28, 2022

The Safeguards Rule , designed to protect customer financial data, would be expanded to include non-financial institutions that engage in financial transactions. Most importantly, it means they must be in compliance with several new rules to protect consumer information by December 2022. What is the FTC’s Safeguards Rule?

Authentication 52

Authentication Financial Services Technology Information Security 52

Security Boulevard

MARCH 24, 2022

The group specializes in stealing and extorting data in exchange for a ransom payment. According to a blog penned by the Okta CISO, here’s what happened: On January 20 2022, a third-party customer support engineer working for Okta had their account compromised by Lapsus$. Review all executive accounts including MFA method changes.

Accountability 59

Accountability Authentication Passwords Social Engineering 59

Duo's Security Blog

OCTOBER 7, 2022

Cyber security is a concern for companies of all sizes, but can be particularly significant for smaller businesses who are less likely to have the dedicated technical staff in place to ensure the right controls are in place to protect them. But what about the firms that sit firmly on the smaller side of the SME spectrum?

Small Business 98

Small Business Cyber Insurance Insurance Cyber Risk 98

NetSpi Executives

MARCH 26, 2024

Government entities can store and retrieve sensitive data with extremely high reliability and almost nonexistent downtime, and other sectors like healthcare, insurance, and utilities can meet the speed of demand by processing multiple terabytes of data with incredible ease, and consistency.

Penetration Testing 59

Penetration Testing Encryption Insurance Healthcare 59

Duo's Security Blog

AUGUST 12, 2021

When’s the last time you finished a project — say, implementing a new cloud integration — without any hiccups or surprises? According to Duo’s cloud data provider, our average mid-market customer manages 20 application integrations in their environment. If you haven’t, you’re in good company.

Retail 98

Retail Healthcare Risk Authentication 98

Centraleyes

FEBRUARY 25, 2024

This blog aims to dissect the nuances of cloud security risks , shedding light on the challenges commonly faced when securing digital assets in the cloud. The CSP secures the underlying infrastructure, including the physical data centers, networking, and hypervisors. Who’s Responsible for Security in the Cloud?

Risk 52

Risk Encryption Social Engineering Authentication 52

Duo's Security Blog

NOVEMBER 16, 2021

Each of these password-related challenges can exacerbate the security risk of compromised credentials which play a role in the majority of breaches, according to the Verizon Data Breach Investigations Report. Also, SSO should integrate with remote access solutions for simplified, secure access to sensitive internal applications.

Passwords 98

Passwords Authentication VPN Data breaches 98

Malwarebytes

JULY 31, 2023

Ortivus are currently working in close collaboration with the affected customers to restore the systems and recover data. While there is a backup system able to take MobiMed’s place “within 24 hours” of an attack, integration with other systems is not 100%. Make multi-factor authentication (MFA) a norm.

Backups 88

Backups Healthcare Risk Technology 88

Centraleyes

DECEMBER 25, 2023

Every user, device, and data packet is scrutinized, and access is granted on a “need-to-know” basis. Data Protection: With the proliferation of cyber threats, safeguarding your most critical asset – data – is paramount. After all, you can’t protect what you don’t know exists.

Authentication 52

Authentication Architecture Cyber threats Accountability 52

Duo's Security Blog

FEBRUARY 8, 2021

Setting Up an Instant Registration Database You don’t know who’s going to sign up and register, and you don’t have time to integrate it with any databases you have with citizen data in order to uniquely identify and authenticate them. I hear you asking: what about multi-factor authentication (MFA) ? I’m being vague here.

CISO 102

CISO Passwords Authentication Accountability 102

Security Boulevard

SEPTEMBER 7, 2021

I talk a lot about finding and fixing vulnerabilities on my blog. Understanding what you need to build your application will inform you what data you are protecting and what kind of security considerations you’ll have while you are writing code. And are you going to implement MFA for extra security? I’d love to know.

Authentication 52

Authentication Passwords Software Engineering 52

Hackology

NOVEMBER 15, 2023

This article explores a comprehensive approach to network protection, encompassing network scanning, vulnerability and patch management, user access controls, network segmentation, and employee training. Network segmentation limits the spread of attacks and allows for different security controls based on data sensitivity.

Network Security 49

Network Security Firewall Cyber threats Passwords 49

Thales Cloud Protection & Licensing

MAY 13, 2024

Unlocking the Cloud: Microsoft and Thales Spearhead Passwordless & MFA for Organizations moving to Microsoft 365. This partner drives major identity-related initiatives and educates the market on how to protect identities. How to improve my protection against cyberattacks? And avoid MFA fatigue and push bombing?

Authentication 62

Authentication Phishing Marketing Cloud Migration 62

Duo's Security Blog

DECEMBER 12, 2023

Certain risks may expose critical infrastructure to cyberattacks, enabling malicious actors to gain unauthorized access to critical business information and potentially causing large-scale data breaches. In fact, IBM's 2023 Cost of a Data Breach Report found that 82% of data breaches involved data stored in the cloud.

Data breaches 107

Data breaches Authentication Passwords Risk 107

Cisco Security

AUGUST 21, 2023

In this blog post, we’ll delve deeper into the potential and versatility of Duo APIs, their applications across industries, and how they can elevate your security posture to new heights. testing environment, and support resources make it easy for developers to integrate Duo’s security solutions into their zero trust architecture.

Authentication 73

Authentication Technology Small Business Architecture 73

Duo's Security Blog

FEBRUARY 13, 2023

That’s why ransomware mitigation is so important, and MFA plays an important role in any ransomware prevention and response strategy. In this post, we’ll talk about how ransomware attacks work and how you can use MFA to help interrupt an attack. The data hijack is meant to elicit fear and urgency from victims.

Ransomware 102

Ransomware Insurance Authentication Passwords 102

Duo's Security Blog

MAY 6, 2024

The security industry has diligently battled compromised credentials, evolving from passwords to multifactor authentication (MFA) to passwordless — our most secure and phishing-resistant method to date — and one that is fully supported in Duo. Additionally, Duo access decisions are now enriched with identity data.

Authentication 85

Authentication Accountability VPN Phishing 85

NetSpi Technical

NOVEMBER 2, 2023

On a recent external assessment, I stumbled upon a method to bypass a client’s MFA requirement: access a single-sign on (SSO) token and leverage that token to access internal applications that—by policy—should have been locked behind an MFA prompt, all without triggering an MFA alert on the end-user’s mobile device.

Authentication 143

Authentication Accountability Social Engineering Penetration Testing 143

Duo's Security Blog

OCTOBER 20, 2022

The challenge Due to the nature of Epic Hyperdrive for EPCS the FDA mandates support for a variety of security protections including Multi-Factor Authentication (MFA) to protect against weak passwords or stolen credentials. The solution Cisco Secure Access by Duo is a leading healthcare MFA provider.

Cyber threats 98

Cyber threats Healthcare Authentication Mobile 98

Duo's Security Blog

SEPTEMBER 30, 2022

On October 27, 2021 the Federal Trade Commission (FTC) announced changes to the FTC Safeguards Rule in order to protect consumer data. The important thing to note is the new and expanded rules have updated security requirements for financial and non-financial institutions that do transactions that use personal consumer data.

Cybersecurity 94

Cybersecurity Authentication CISO Healthcare 94

SecureWorld News

FEBRUARY 19, 2024

A platform that started as a blogging tool has evolved into a globally renowned solution that makes website design and development more accessible and easier than ever. WordPress sites can be structured in an almost infinite number of ways, integrating with numerous other open-source plugins and third-party systems.

Backups 93

Backups Firewall Encryption eCommerce 93

BH Consulting

JUNE 20, 2023

Data protection and privacy specialists (let’s use the term privacy professionals for simplicity) are some of the most well-qualified people I know – many with robust legal or compliance backgrounds. For the purpose of this blog – we are going to use the term information security to mean both cyber and information security.

Cybersecurity 52

Cybersecurity Information Security VPN Authentication 52

Krebs on Security

SEPTEMBER 5, 2023

In November 2022, the password manager service LastPass disclosed a breach in which hackers stole password vaults containing both encrypted and plaintext data for more than 25 million users. ” Bax said he closely reviewed the massive trove of cryptocurrency theft data that Taylor Monahan and others have collected and linked together.

Cryptocurrency 349

Cryptocurrency Passwords Encryption Accountability 349

Duo's Security Blog

AUGUST 3, 2023

In the ever-evolving cybersecurity world, organizations must adopt robust measures to safeguard sensitive data and critical systems. Access management solutions, including single sign-on (SSO), multi-factor authentication (MFA), and privileged access management (PAM), can offer a comprehensive defense against threats.

Authentication 98

Authentication Risk Passwords Insurance 98

Duo's Security Blog

JUNE 27, 2023

According to the 2022 Verizon Data Breach Investigations Report, ransomware has increased by 13% over the previous year — a jump greater than the last five years combined. evolved the double-extortion technique of threatening data release in addition to locking systems, Ransomware 3.0 The Rise of Ransomware 3.0 Ransomware 3.0

Ransomware 101

Ransomware Healthcare Phishing Authentication 101

Duo's Security Blog

JANUARY 18, 2022

Salesforce is putting new policies in place next month to better protect their customers and keep their data secure. Starting February 1, the leading customer relationship management company will require all customers to use multi-factor authentication (MFA) — and Duo is among the top solutions they recommend. “On

Authentication 53

Authentication Password Management Accountability Passwords 53

Cisco Security

AUGUST 26, 2022

We at Cisco Secure have embraced this concept for a while now with our continually growing ecosystem of multi-vendor technology integrations. To do this, security vendors must adopt open ecosystems of APIs to easily integrate with each other to provide effective ways for mutual customers to defend and react to cybersecurity attacks.

Firewall 127

Firewall Authentication Passwords Threat Detection 127