Duo's Security Blog

NOVEMBER 10, 2023

10 and over 250 reviews, Duo is honored to share that we won the 2023 TrustRadius Top Rated Award for Authentication. Duo’s Multi-Factor Authentication solution combines multiple authentication factors to provide simple ways to protect users. With a score of 9.3/10

Authentication 108

Authentication Education Accountability Technology 108

Adam Levin

JANUARY 23, 2019

We’ve studied the latest techniques attackers use, and designed the quiz to teach people how to spot them,” wrote Jigsaw product manager Justin Henck in a blog announcement. The best protection against phishing is two-factor authentication.

Phishing 166

Phishing Authentication Accountability Passwords 166

The Last Watchdog

FEBRUARY 3, 2022

I currently have over 450 accounts that use passwords combined with a variety of two-factor authentication methods. Related: How the Fido Alliance enables password-less authentication. Only a dozen or so of my accounts get authenticated via self-hosted services. Sharing protocols.

Authentication 235

Authentication Passwords Accountability Technology 235

NSTIC

OCTOBER 3, 2022

In celebration of Cybersecurity Awareness Month, NIST will be publishing a dedicated blog series throughout October; we will be sharing blogs each week that will match up to four key behaviors identified by the National Cybersecurity Alliance (NCA).

Authentication 79

Authentication Cybersecurity Passwords 79

Malwarebytes

DECEMBER 4, 2023

When the breach was first announced, 23andMe urged its users to ensure they have strong passwords, to avoid reusing passwords from other sites, and to enable multi-factor authentication (MFA). Enable two-factor authentication (2FA). And it looks as if they listened to us.

Passwords 120

Passwords Identity Theft Accountability Data breaches 120

The Last Watchdog

DECEMBER 6, 2022

Much more effective authentication is needed to help protect our digital environment – and make user sessions smoother and much more secure. Underscoring this trend, Uber was recently hacked — through its authentication system. The best possible answer is coming from biometrics-based passwordless, continuous authentication.

Authentication 203

Authentication Healthcare Artificial Intelligence Passwords 203

Duo's Security Blog

JANUARY 11, 2024

Duo SSO is the linchpin to our streamlined authentication experience in which users authenticate once at the start of their day and forget that Duo is there as we securely and automatically sign them into the rest of their Duo applications. support and two-factor authentication.

Authentication 107

Authentication Cybersecurity Architecture Accountability 107

Krebs on Security

JUNE 27, 2023

But O’Connor also pleaded guilty in a separate investigation involving a years-long spree of cyberstalking and cryptocurrency theft enabled by “ SIM swapping ,” a crime wherein fraudsters trick a mobile provider into diverting a customer’s phone calls and text messages to a device they control. million. .

Cryptocurrency 232

Cryptocurrency Accountability Mobile Hacking 232

Heimadal Security

MARCH 31, 2021

On the 11th of January, the networking equipment and Internet of Things (IoT) devices provider started to send out emails to customers informing them of a recent security breach, and asking them to change their passwords and to enable two-factor authentication (2FA).

Network Security 98

Network Security IoT Authentication Passwords 98

NetSpi Technical

JANUARY 18, 2024

Time-Based One-Time Password (TOTP) Time-Based One-Time Password (TOTP) is a common two-factor authentication (2FA) mechanism used across the internet. During authentication, the secret is used in combination with the time in a cryptographic hash function to produce a secure 6-digit passcode. But then it struck me.

Authentication 115

Authentication Passwords Accountability Penetration Testing 115

Duo's Security Blog

JULY 6, 2023

Today we will discuss the survey makeup, review key results and explain why Duo’s Passwordless technology is well positioned to meet enterprise authentication needs highlighted in the study. Yet, enterprises are faced with a trade-off between enabling a great user experience and deploying strong security.

Authentication 64

Authentication Passwords Risk Technology 64

Malwarebytes

SEPTEMBER 20, 2023

Organizations often put out a rolling statement on their website, blog, or X (Twitter). Enable multi-factor authentication Multi-factor authentication (MFA) adds an extra layer of security when logging in to your online accounts, and stops anyone from logging in with just your password.

Data breaches 128

Data breaches Passwords Authentication Phishing 128

Duo's Security Blog

MAY 23, 2023

Passwords are a weak point in modern-day secure authentication practices, with Verizon highlighting that almost 50% of breaches start with compromised credentials. In our previous two features, we covered the dangers of phishing (one method of credential compromise) and how to mitigate its impact on users.

Authentication 117

Authentication Passwords Data breaches Phishing 117

Duo's Security Blog

MAY 17, 2023

The Universal Prompt is Duo's next-generation authentication interface that delivers a better experience for every user. Simplify Secure Access – Modernizing security can be disruptive for users, but Universal Prompt makes it painless with a smooth authentication experience, intuitive web-based design, and several self-service options.

Authentication 86

Authentication Engineering Education Phishing 86

Malwarebytes

FEBRUARY 20, 2023

From March 19, users of Twitter won’t be able to use SMS-based two-factor authentication (2FA) unless they have a subscription to the paid Twitter Blue service. You can still use the authentication app and security key methods. Twitter is making some dramatic shake ups to its currently available security settings.

Authentication 96

Authentication Phishing Mobile Accountability 96

Duo's Security Blog

JUNE 12, 2023

Before we can discuss passkeys, we need to lay some groundwork and discuss authentication, Passwordless and WebAuthn. What is authentication? Authentication is the process of verifying your online identity. We added multi-factor authentication (MFA) – something you know and something you have or are.

Authentication 120

Authentication Passwords Password Management Phishing 120

Duo's Security Blog

AUGUST 3, 2023

Access management solutions, including single sign-on (SSO), multi-factor authentication (MFA), and privileged access management (PAM), can offer a comprehensive defense against threats. This eases the authentication burden on users, only stepping up when risky changes are detected.

Authentication 83

Authentication Risk Passwords Insurance 83

Krebs on Security

AUGUST 29, 2018

On Tuesday, the Facebook -owned social network said it is in the process of rolling out support for third-party authentication apps. New two-factor authentication options Instagram says it is rolling out to users over the next few weeks. Scroll down and tap Two-Factor Authentication.

Authentication 140

Authentication Mobile Passwords Accountability 140

Javvad Malik

NOVEMBER 11, 2021

Cloud usage has increased, we’ve seen VPN’s crop up everywhere, and the shiny hotness that is MFA (multi factor authentication). I’ve said it before, and I’ll say it again: Enabling multi-factor authentication makes you 99% less likely to get hacked. Enable MFA!

VPN 100

VPN Authentication Passwords Scams 100

Duo's Security Blog

JULY 12, 2023

Applications have grown in variety and adoption for over two decades. That is because Duo Single Sign-On (SSO) is enabled on my work account. identity provider (IdP) and OpenID Connect (OIDC) provider (OP) that adds two-factor authentication. SaaS (Software-as-a-Service) adoption is skyrocketing.

Mobile 80

Mobile Authentication Marketing Passwords 80

The Last Watchdog

JUNE 28, 2021

To help protect against these types of attacks, organizations should enable multi-factor authentication (MFA) on login accounts when available, monitor for brute force attempts and educate users on the importance of password hygiene, such as using unique and strong passwords, in the battle against cyber crime.”.

Hacking 214

Hacking Phishing Passwords Accountability 214

Cisco Security

AUGUST 21, 2023

In this blog post, we’ll delve deeper into the potential and versatility of Duo APIs, their applications across industries, and how they can elevate your security posture to new heights. , testing environment, and support resources make it easy for developers to integrate Duo’s security solutions into their zero trust architecture.

Authentication 64

Authentication Technology Small Business Architecture 64

SecureWorld News

JANUARY 31, 2023

The vulnerability could have allowed malicious threat actors to turn off a user's two-factor authentication (2FA) protection simply by knowing the user's phone number or email address. Meta fixed the bug a month later and paid Mänôz $27,200 for his report.

Accountability 72

Accountability Authentication Mobile Phishing 72

Duo's Security Blog

NOVEMBER 27, 2023

Here are a couple of tools that can help you reduce your risk for some of Scattered Spider’s techniques: SIM Swaps Remove SMS and telephony authentication methods, limiting users to stronger factors like WebAuthn and Verified Duo Push. Enable Muted Push to reduce a threat actor’s ability to catch end user’s attention.

Authentication 79

Authentication Social Engineering Risk Accountability 79

eSecurity Planet

OCTOBER 11, 2021

Company officials also used the first week of October – which is Cybersecurity Awareness Month – to remind users of the company’s plan to enable two-factor authentication by default to many accounts, and that it will enable it for 150 million accounts before the end of 2021.

Risk 135

Risk Passwords Authentication Accountability 135

The Last Watchdog

AUGUST 29, 2022

Without strong, secure passwords or two-factor authentication ( 2FA ) enabled in an organization or startup, it becomes easy for attackers to access stolen credentials on their web and email servers. We’ve shared some helpful guidance on password security at Zigrin Security blog. Authentication bypass.

Hacking 201

Hacking Passwords Password Management Data breaches 201

Duo's Security Blog

AUGUST 1, 2022

There were 60 changes made, with new rules around multi-factor (MFA) being one of the most significant. focuses on developing stronger authentication requirements around NIST Zero Trust Architecture guidelines. A minimum of two of the three factors is required for authentication. DarkReading reports PCI DSS 4.0

Authentication 84

Authentication Passwords Accountability VPN 84

Duo's Security Blog

MARCH 30, 2023

In our last Universal Prompt blog we focused on a few of the security benefits that using it provides. In this blog we’ll get into more of the user experience benefits. Improved User Experience – The Universal Prompt is a major redesign with new styling and a workflow-based authentication experience.

Authentication 54

Authentication Software Risk VPN 54

Google Security

MAY 5, 2023

Passkeys are a new, passwordless authentication method that offer a convenient authentication experience for sites and apps, using just a fingerprint, face scan or other screen lock. And since passkeys are standardized, a single implementation enables a passwordless experience across browsers and operating systems.

Authentication 118

Authentication Passwords Technology Password Management 118

Duo's Security Blog

MARCH 11, 2022

Let’s dive into how you can use Duo’s py_webauthn library to enable passwordless user authentication in your Python server. WebAuthn and Multi-Factor Authentication. Multi-factor authentication is built on the basic tenet, “Something you know, something you have, something you are: pick two.”.

Authentication 71

Authentication Passwords Architecture Accountability 71

eSecurity Planet

SEPTEMBER 9, 2021

Fortinet confirmed the veracity of the hackers’ claims in a blog post today. The network security vendor said the credentials were stolen from systems that remain unpatched against a two-year-old vulnerability – CVE-2018-13379 – or from users who patched that vulnerability but failed to change passwords.

VPN 114

VPN Passwords Authentication Network Security 114

Identity IQ

JULY 17, 2023

In this blog, we provide you with ten actionable ways to safeguard your digital identity, focusing specifically on how to prevent compromised credentials. Enable Two-Factor Authentication Utilize two-factor authentication (2FA) if it is available. How Can Your Credentials Become Compromised?

Identity Theft 52

Identity Theft Password Management Passwords Authentication 52

Identity IQ

JULY 17, 2023

In this blog, we provide you with ten actionable ways to safeguard your digital identity, focusing specifically on how to prevent compromised credentials. Enable Two-Factor Authentication Utilize two-factor authentication (2FA) if it is available. How Can Your Credentials Become Compromised?

Identity Theft 52

Identity Theft Password Management Passwords Authentication 52

SecureWorld News

NOVEMBER 14, 2022

"The attackers’ spam sites are populated with various random questions and answers found to be scraped from other Q&A sites," Sucuri reported in a blog post. Users must enable two-factor authentication and ensure that all software is up-to-date. Many of them have cryptocurrency and financial themes.".

Malware 70

Malware Cryptocurrency Engineering Authentication 70

Troy Hunt

NOVEMBER 14, 2018

2FA, MFA, 2-Step They may all be familiar, but there are important differences that warrant explanation and we'll start with the acronym we most commonly see: 2FA is two-factor authentication. Adding a second factor typically means either requiring "something that you have" or "something that you are".

Passwords 259

Passwords Authentication Accountability Mobile 259

Duo's Security Blog

MARCH 9, 2021

authentication standard. Duo SSO acts as an identity provider (IdP), authenticating your users using existing on-premises Active Directory (AD) or any SAML 2.0 IdP and prompting for two-factor authentication before permitting access to Google Workspace. Follow these simple instructions to help you set things up.

Authentication 98

Authentication CISO Engineering 98

eSecurity Planet

SEPTEMBER 15, 2021

Users can choose among options such as the Microsoft Authenticator app, Windows Hello biometric technology, a security key compatible with the FIDO-2 (Fast Identity Online) standard, or a verification code that can be sent to a phone or email. Google automatically makes account holders use two-factor authentication.

Accountability 122

Accountability Passwords Authentication Phishing 122