Duo's Security Blog

NOVEMBER 16, 2023

In today's interconnected world, ensuring robust security measures is crucial. One of the key aspects of application security is endpoint security, which focuses on protecting the devices that access these applications. Check out the Cisco article Configure Duo and Secure Endpoint to Respond to Threats.

Authentication 81

Authentication Architecture Risk Engineering 81

eSecurity Planet

JANUARY 11, 2024

Ransomware remains just one of many different threats and as security teams eliminate key vectors of attack, adversaries will shift tactics. Unmanaged devices consist of any device that connects to the network, cloud resources, or other assets without corporate-controlled security. How Does Remote Encryption Work?

Ransomware 112

Ransomware Encryption IoT VPN 112

Duo's Security Blog

APRIL 8, 2024

It is a well-known and established point that a password alone is not enough to secure an account. This reality highlights the need for security enhancements to the enrollment process that provide real-time detection and remediation while maintaining scalable usability.” That’s where multi-factor authentication (MFA) comes in.

Authentication 140

Authentication Accountability Risk Phishing 140

The Last Watchdog

MARCH 8, 2023

Therefore, the security of APIs is crucial to ensure the confidentiality, integrity, and availability of sensitive information and to protect against potential threats such as data breaches, unauthorized access, and malicious attacks. So, how can you ensure your API security is effective and enable your digital transformation?

Digital transformation 200

Digital transformation Data breaches Cyber Risk Marketing 200

The Last Watchdog

MAY 5, 2022

Best practices. Let’s walk through some practical steps organizations can take today, implementing zero trust and remote access strategies to help reduce ransomware risks: •Obvious, but difficult – get end users to stop clicking unknown links and visiting random websites that they know little about, an educational challenge.

Risk 247

Risk Ransomware Internet Internet 247

The Last Watchdog

FEBRUARY 11, 2024

Related: The case for augmented reality training Because of this, cybersecurity investments and regulatory oversight are increasing at an astounding rate , especially for those in the financial services industry, bringing an overwhelming feeling to chief compliance officers without dedicated security teams. The list goes on.

Cyber Risk 234

Cyber Risk Risk Financial Services Cyber threats 234

Jane Frankland

JANUARY 9, 2024

However, not all organisations have had the means to invest in and manage the staffing and infrastructure required for a Security Operations Centre (SOC). MDR providers offer an all-in-one solution for organisations that combines people, processes, and technologies to strengthen security measures and reduce risk exposure.

Threat Detection 147

Threat Detection Technology Marketing Artificial Intelligence 147

Security Boulevard

AUGUST 30, 2021

<a href='/blog?tag=Endpoint tag=Endpoint Protection'>Endpoint Protection</a> <a href='/blog?tag=Data tag=Data Loss Prevention'>Data Loss Prevention</a> <a href='/blog?tag=File tag=File Transfers'>File Transfers</a> <a href='/blog?tag=Advanced

Social Engineering 101

Social Engineering Cybersecurity Unstructured Data Engineering 101

Webroot

APRIL 3, 2024

Simply put, it’s the practice of ensuring that only authorized individuals have access to your sensitive information and online accounts. Update your Internet browser Browser updates often contain security patches that address known vulnerabilities. Instead, enter your credentials each time for added security.

VPN 83

VPN Passwords Scams Accountability 83

Anton on Security

SEPTEMBER 3, 2021

Anybody would be free to invent a technology to analyze security telemetry (logs, endpoint traces, traffic) and call it whatever they want. Perhaps somebody will have invented CLA (Compliance Log Analysis) or SEC (Security Event Correlation) or perhaps SDS (Security Data Science) or SILS (Security and IT Log Search)?

Technology 214

Technology Threat Detection Marketing Cybersecurity 214

Duo's Security Blog

OCTOBER 25, 2023

It’s the idea that you need to secure the people and devices that connect to your network from cyberattacks so your organization can continue to move forward. Securing the people, your workforce, has to do with identity and verifying users are who they say they are before they’re allowed to access network applications and resources.

Software 110

Software Mobile Malware Risk 110

Duo's Security Blog

MAY 11, 2022

This is the problem that many security practitioners are trying to solve. To secure this modern remote access workflow, administrators need a mechanism to perform posture checks on devices and enforce access policies based on the device security posture. Enter Duo’s Device Health application.

VPN 85

VPN Firewall System Administration Encryption 85

Webroot

MAY 6, 2024

For businesses, this means implementing a comprehensive incident response plan that includes secure, immutable backups and regular testing to ensure rapid recovery in the event of an attack. This resilience requires ongoing vigilance and robust security measures for everyone involved.

Antivirus 84

Antivirus Education Cyber threats Phishing 84

SC Magazine

JUNE 17, 2021

In a blog post, Avanan said hackers are bypassing static link scanners by hosting their attacks on publicly-known services. According to Avanan blog, once the attacker publishes the lure, “Google provides a link with embed tags that are meant to be used on forums to render custom content.

Phishing 110

Phishing Social Engineering Engineering CISO 110

eSecurity Planet

MARCH 11, 2024

And all IT and security teams should follow vulnerability news for vendor bulletins and updates. JetBrains released a detailed blog post explaining the specific timeline of discovering the vulnerabilities, the conflict with Rapid7, and JetBrains’ stance on releasing vulnerability information. and iPadOS 17.4.

Authentication 102

Authentication Software VPN Security Defenses 102

Security Affairs

JUNE 14, 2022

APIs are the gateway to providing the high security of data in an organization. The API ecosystem has become a lucrative target of attack for bad actors; therefore, a purpose-built technology and security strategy should be implemented to successfully anticipate and prevent these attacks. Prioritize Security.

Authentication 75

Authentication Encryption Software Hacking 75

The Last Watchdog

NOVEMBER 8, 2021

However, healthcare data ranks at the top of the list for needing improvements in security and privacy protections. Healthcare data security and privacy is a problem that continues to grow. With the benefits of the cloud comes the heavy responsibility of securing sensitive data. Patient data exposures.

Healthcare 349

Healthcare Technology Architecture IoT 349

Duo's Security Blog

DECEMBER 7, 2022

Security Magazine reports less than 10% of companies with fewer than 50 employees have dedicated financial resources for cybersecurity. How are you protecting your endpoints? In the long run, a solid cyber security practice could also bring premiums down, ensuring a ‘belt and braces’ approach for the company.

Insurance 98

Insurance Cyber Insurance Ransomware Risk 98

Centraleyes

APRIL 16, 2024

Beyond being a set of security protocols, data loss prevention policies are a strategic approach that involves identifying, monitoring, and protecting sensitive data throughout its lifecycle. This nuanced approach enhances security without impeding essential healthcare workflows.

Encryption 52

Encryption Education Risk Healthcare 52

Centraleyes

MARCH 12, 2024

What is a Security Audit? At its core, an audit systematically examines an organization’s processes, controls, and practices. In cybersecurity, audit management involves assessing the effectiveness of security measures, identifying vulnerabilities, and ensuring compliance with industry standards and regulations.

Risk 52

Risk Cybersecurity Government Firewall 52

Duo's Security Blog

OCTOBER 7, 2022

Cyber security is a concern for companies of all sizes, but can be particularly significant for smaller businesses who are less likely to have the dedicated technical staff in place to ensure the right controls are in place to protect them. We have been witnessing an avalanche of interest in cyber liability insurance over the last few years.

Small Business 98

Small Business Cyber Insurance Insurance Cyber Risk 98

Anton on Security

MAY 5, 2023

Security business is booming! Not quite, but if you recall, my previous RSA blog , the skeletal grin of XDR stared at you from nearly every booth in 2022. Yes, this is yet another acronym from my former colleagues that is starting its life as a name for a domain of practice rather than a market (in the future … who knows).

Artificial Intelligence 130

Artificial Intelligence Threat Detection Marketing Cybersecurity 130

Anton on Security

JULY 20, 2022

With cloud, come new layers of security exposure and control (and huge security advantages ), so including those in detection planning is crucial to success. Similarly, the role of endpoint telemetry?—?such will wane as organizations adopt cloud-native technologies and endpoints start to disappear. such as EDR? —?will

Threat Detection 100

Threat Detection Cloud Migration Engineering Technology 100

McAfee

NOVEMBER 10, 2020

According to an Analysis Report (AR20-268A) from the Cybersecurity and Infrastructure Security Agency (CISA), this new normal work environment has put federal agencies at risk of falling victim to cyber-attacks that exploit their use of Microsoft Office 365 (O365) and misuse their VPN remote access services. Basic SOC Best Practices.

VPN 92

VPN Cyber Attacks Accountability Threat Detection 92

Duo's Security Blog

JANUARY 9, 2023

This leaves security teams scrambling to implement best practices for mobile device security. Fortunately, Duo makes implementing mobile security policies simple. These policies are geared to protect your organization when access devices don't meet your security needs.

Mobile 99

Mobile Encryption Authentication Data breaches 99

Google Security

APRIL 30, 2024

Posted by Will Harris, Chrome Security Team Chromium's sandboxed process model defends well from malicious web content, but there are limits to how well the application can protect itself from malware already on the computer. This blog will also show how the logging works in practice by testing it against a python password stealer.

Passwords 91

Passwords Malware Encryption System Administration 91

Lenny Zeltser

NOVEMBER 3, 2023

The notion that security is everyone’s responsibility in computer systems dates back to at least the early 1980s when it was included in a US Navy training manual and hearings in the US House of Representatives. Behind the pithy slogan is the idea that every person in the organization contributes to its security program.

Cybersecurity 100

Cybersecurity Accountability Engineering Authentication 100

McAfee

DECEMBER 10, 2020

McAfee was the only vendor to be named the January 2020 Gartner Peer Insights ‘Voice of the Customer’ Customers’ Choice for Cloud Access Security Brokers (CASBs). Disclaimer: Gartner, Gartner Peer Insights ‘Voice of the Customer’: Cloud Access Security Brokers, 13 March 2020. Coolest Cloud and Coolest Endpoint Security Companies.

Policy Compliance 98

Policy Compliance Technology Information Security Media 98

McAfee

MAY 5, 2021

Bottom Line: McAfee stopped the MITRE ATT&CK Evaluation Carbanak and FIN7 threats in their tracks within the first 15% of the major steps of the attack chain (on average), delivering on a critical security operations center (SOC) strategy: Stop the attack as early as possible. .

Cyber threats 104

Cyber threats Risk Government Cybersecurity 104

CyberSecurity Insiders

MAY 21, 2021

Endpoint Security. Endpoint security is all about securing nodes, devices, and computing gadgets of remote employees who have access to your company’s network and protected information. Secured Cloud Services. Each device that is allowed to connect to your business network has to be assessed beforehand.

Cybersecurity 84

Cybersecurity Authentication Government Education 84

Anton on Security

APRIL 28, 2022

You can review my ideas on the topic in this blog series “Anton and The Great XDR Debate, Part 1” “Anton and The Great XDR Debate, Part 2” “Anton and The Great XDR Debate, Part 3.” Q: From a practical approach, does it pay to integrate known vulnerabilities into SIEM cases and rules? see blog from 2016 where we first spotted it).

Threat Detection 189

Threat Detection Technology VPN Architecture 189

Herjavec Group

JUNE 24, 2021

What are the best practices that everyone should learn? The simple fact is, lack of awareness – for any number of reasons like lack of training, burnout, or multi-tasking – creates security risk. . The sheer number of endpoints that need to be identified and secured properly is enough to make anyone’s head spin!

InfoSec 85

InfoSec Cybersecurity Education Cybercrime 85

eSecurity Planet

SEPTEMBER 5, 2023

Major cybersecurity events in the last week make clear that hackers just keep getting savvier — and security teams need to be vigilant to keep up. And a rather ingenious application of the Windows Container Isolation Framework demonstrates the potential vulnerability of endpoint security measures.

VPN 96

VPN Authentication Ransomware Antivirus 96

Security Boulevard

JULY 19, 2021

Best practices for securing the software supply chain. The Department of Defense’s Cybersecurity Maturity Model Certification, established on January 31st, 2020, was the first attempt at creating a supply chain security compliance mandate. Software developers can prevent supply chain attacks by securing DevOps.

Software 145

Software Risk Data breaches Small Business 145

The Last Watchdog

NOVEMBER 9, 2020

The good news is that we already possess the technology, as well as the best practices frameworks, to mitigate fast-rising IoT exposures. The challenge of the moment is that many companies already have their hands full trying to improve their security posture as they migrate their legacy, on premises, IT systems to the cloud.

IoT 279

IoT Healthcare Internet Internet 279

Security Boulevard

JULY 20, 2022

With cloud, come new layers of security exposure and control (and huge security advantages ), so including those in detection planning is crucial to success. Similarly, the role of endpoint telemetry?—?such will wane as organizations adopt cloud-native technologies and endpoints start to disappear. such as EDR? —?will

Threat Detection 98

Threat Detection Cloud Migration Engineering Technology 98

Malwarebytes

OCTOBER 20, 2022

Patch management that is consistent and efficient has never been more critical in keeping your security infrastructure up to date and secure. Although today’s endpoint management solutions include patch management functionalities, third-party patching is an area that shouldn’t be forgotten.

Software 72

Software Risk Insurance Architecture 72