Duo's Security Blog

OCTOBER 18, 2022

By this point, we’re all familiar with the list of requirements for a strong password: unique, long, memorable, free from any personal information… But even the strongest passwords can pose a risk if they’re the only thing standing between your users and enterprise content.

Insurance 54

Insurance Passwords Cyber Insurance Authentication 54

The Last Watchdog

OCTOBER 24, 2022

It involves regularly changing passwords and inventorying sensitive data. Change passwords regularly. One of the most overlooked ways to protect your business from data breaches is changing passwords on a regular basis. Many people have their original passwords from college, and they never update them. This can be risky.

Passwords 214

Passwords Security Awareness Data breaches Cybersecurity 214

Cisco Security

OCTOBER 19, 2022

You can start with your email accounts (especially any that you use as a recovery email for forgotten passwords, or use for financial, medical, or other sensitive communications). Set a long, unique password for each account. Whether short or long, a password on its own is still vulnerable to capture or compromise.

Passwords 109

Passwords Authentication Accountability Password Management 109

Duo's Security Blog

JULY 7, 2023

It’s the strongest authentication method available today, which is why you see passkeys moving to replace passwords altogether. In addition, admins can choose to remember their last used login method so that they are automatically prompted after entering their password without an extra click. See the video at the blog post.

Authentication 83

Authentication Passwords Mobile Password Management 83

Duo's Security Blog

MAY 23, 2023

Your passwords are on the internet. Talks of passkeys, passphrases, and even password less all point in one direction: eroding faith in the previously trusty password tucked under your keyboard. These habits highlight the need for more modern password technology and stronger authentication methods.

Authentication 131

Authentication Passwords Data breaches Phishing 131

Identity IQ

JULY 17, 2023

In this blog, we provide you with ten actionable ways to safeguard your digital identity, focusing specifically on how to prevent compromised credentials. Credential Stuffing : Attackers use leaked usernames and passwords from one website to attempt unauthorized access on other platforms. How Can Your Credentials Become Compromised?

Identity Theft 52

Identity Theft Password Management Passwords Authentication 52

Identity IQ

JULY 17, 2023

In this blog, we provide you with ten actionable ways to safeguard your digital identity, focusing specifically on how to prevent compromised credentials. Credential Stuffing : Attackers use leaked usernames and passwords from one website to attempt unauthorized access on other platforms. How Can Your Credentials Become Compromised?

Identity Theft 52

Identity Theft Password Management Passwords Authentication 52

NetSpi Executives

OCTOBER 24, 2023

Use Strong Passwords and a Password Manager In 2022, threat actors leaked more than 721 million passwords. Among the passwords exposed, 72 percent of users were found to be still using already-compromised passwords. Turn on Multifactor Authentication Even strong, secure passwords can be exposed by attackers.

Social Engineering 59

Social Engineering Engineering Cybersecurity Passwords 59

SC Magazine

MAY 7, 2021

Google made the announcement on World Password Day , in which Mark Risher, Google’s director of product management, identity and user security, pointed out in a blog that 66% of Americans admit to using the same password across multiple sites, which makes all those accounts vulnerable if any one fails. “We

Authentication 89

Authentication Passwords Password Management Mobile 89

Webroot

APRIL 3, 2024

This encompasses everything from protecting your passwords to being vigilant against phishing scams and online fraud. Identity Management Day serves as a reminder that protecting our identities isn’t just a one-time task — it’s an ongoing commitment that requires vigilance and proactive measures all year round.

VPN 83

VPN Passwords Scams Accountability 83

Approachable Cyber Threats

DECEMBER 28, 2020

The Top Cybersecurity Blogs We're Reading in 2020. Here’s a collection of our favorite cybersecurity blogs and websites from the industry's foremost thought leaders and reporters. #9. How Hackers Steal and Use Your Passwords. How Am I Supposed to Remember All These Passwords? The password system is broken.

Passwords 98

Passwords DDOS Healthcare Scams 98

Troy Hunt

SEPTEMBER 11, 2018

that no, you didn't just need a username and birth date to reset the account password. So I wrote a blog post. Shortly after that blog post, three things happened and the first was that it got press. Further, I propose that this is a perfect case where shaming is not only due, but necessary. The Register wrote about it.

Media 261

Media Accountability Passwords Mobile 261

Google Security

OCTOBER 12, 2022

In this post we cover details on how passkeys stored in the Google Password Manager are kept secure. See our post on the Android Developers Blog for a more general overview. Passkeys are a safer and more secure alternative to passwords. A user has different passkeys for different services.

Password Management 85

Password Management Passwords Encryption Backups 85

Thales Cloud Protection & Licensing

OCTOBER 25, 2023

Vishing “While email may still be the most common mechanism for social engineering, we increasingly see attacks via social media, platforms such as WhatsApp, physical compromise, snail mail, and phone calls,” says ethical hacker FC in a blog. Most people are familiar with the term phishing, but not everyone knows about vishing.

Social Engineering 83

Social Engineering Phishing Engineering Scams 83

Malwarebytes

FEBRUARY 20, 2023

From the above linked Twitter blog post: While historically a popular form of 2FA, unfortunately we have seen phone-number based 2FA be used - and abused - by bad actors. As Twitter is so mobile-centric and likely already has your mobile number, SMS 2FA is for many people a natural fit for the platform. Out of those, 74.4%

Authentication 92

Authentication Phishing Mobile Accountability 92

Malwarebytes

SEPTEMBER 21, 2021

Show them these tips: Never use the same password twice. And if your child uses the same password across multiple accounts, when one gets breached they are all vulnerable. And if your child uses the same password across multiple accounts, when one gets breached they are all vulnerable. This is where a password manager comes in.

Internet 103

Internet Internet Passwords Password Management 103

McAfee

JANUARY 28, 2020

Don’t reuse passwords. Password reuse is a common problem, especially in consumer cloud services. When using a cloud service for the first time, it’s easy to think that if the data you are using in that particular service isn’t confidential, then it doesn’t matter if you use your favorite password. One password….

Passwords 71

Passwords Mobile Identity Theft VPN 71

Webroot

JUNE 2, 2022

Use a strong, unique password for every account that you have. It will keep your system safe from all types of malware threats—and includes access to LastPass®, a reliable and easy-to-use password management tool. The post Cyber threats in gaming—and 3 tips for staying safe appeared first on Webroot Blog.

Cyber threats 99

Cyber threats Social Engineering Accountability Malware 99

SC Magazine

MAY 12, 2021

In a blog, Sophos researchers explain how the attackers – which the researchers believe could all be operated by the same group – used social engineering, counterfeit websites, including a fake iOS App Store download page, and an iOS app-testing website to distribute the fake apps to their victims. Do not make it easy for them.

Scams 62

Scams Cryptocurrency Social Engineering Banking 62

Identity IQ

JULY 3, 2023

In this blog, we share guidance on how to detect and respond to account misuse so you can mitigate the risks associated with it. Unusual login attempts One of the most apparent signs of account misuse is failed login attempts or password reset notifications. Ensure that the new password you create is strong and unique.

Accountability 52

Accountability Identity Theft Passwords Social Engineering 52

Krebs on Security

SEPTEMBER 5, 2023

In November 2022, the password manager service LastPass disclosed a breach in which hackers stole password vaults containing both encrypted and plaintext data for more than 25 million users. Monahan said virtually all of the victims she has assisted were longtime cryptocurrency investors, and security-minded individuals.

Cryptocurrency 349

Cryptocurrency Passwords Encryption Accountability 349

Thales Cloud Protection & Licensing

OCTOBER 24, 2019

Help telecommuting employees : Given the rise of mobile and the cloud, organizations would do themselves a great disservice if they exclude telecommuting employees from their security training programs. These guidelines should include the following: Set up a Strong Password Policy. Implement Multi-Factor Authentication.

Security Awareness 83

Security Awareness InfoSec Passwords Accountability 83

Security Affairs

SEPTEMBER 22, 2019

Hi folk, let me inform you that I suspended the newsletter service, anyway I’ll continue to provide you a list of published posts every week through the blog. A flaw in LastPass password manager leaks credentials from previous site. Magecart attackers target mobile users of hotel chain booking websites.

Adware 52

Adware Password Management Advertising Hacking 52

Duo's Security Blog

SEPTEMBER 1, 2023

"Based on FIDO standards, passkeys are a replacement for passwords that provide faster, easier, and more secure sign-ins to websites and apps across a user’s devices. Unlike passwords, passkeys are always strong and phishing resistant. The FIDO Alliance asserts that passkeys are a replacement for passwords.

Passwords 109

Passwords Authentication Insurance Cyber Insurance 109

Google Security

MAY 11, 2022

Department of Labor ) because users retain the ability to log into their online accounts, often with a simple password, from anywhere in the world. This blog will deep dive into the method of phishing and how it has evolved today. Password managers that can validate the identity of the web page before logging in.

Phishing 106

Phishing Scams Authentication Accountability 106

Webroot

MAY 3, 2022

Passwords have become a common way to access and manage our digital lives. Having a password allows you to securely access your information, pay bills or connect with friends and family on various platforms. However, having a password alone is not enough. Your passwords also need to be managed and protected.

Passwords 117

Passwords Identity Theft Password Management Antivirus 117

The Last Watchdog

NOVEMBER 9, 2020

Too often we see companies with strong security policies and tools to protect employee corporate-owned endpoints lacking any security oversite for IoT and mobile devices,” Chris Sherman, senior industry analyst at Forrester told me. This column originally appeared on Avast Blog.).

IoT 279

IoT Healthcare Internet Internet 279

Troy Hunt

NOVEMBER 14, 2018

Last week I wrote a couple of different pieces on passwords, firstly about why we're going to be stuck with them for a long time yet and then secondly, about how we all bear some responsibility for making good password choices. This week, I wanted to focus on going beyond passwords and talk about 2FA.

Passwords 261

Passwords Authentication Accountability Mobile 261

Zigrin Security

OCTOBER 11, 2023

For a detailed threat actor description do not forget to check out our blog article about selecting between black-box, white-box, and grey-box penetration tests and also you would know which pentest you need against a specific threat actor. Avoid using easily guessable passwords such as your name, birthdate, or “password123.”

Cyber threats 52

Cyber threats Penetration Testing Passwords Backups 52

The Last Watchdog

JANUARY 31, 2022

We all rely on passwords. For better or worse, we will continue to use passwords to access our computing devices and digital services for years to come. Related : The coming of password-less access. Passwords were static to begin with. They have since been modified in two directions: biometrics and dynamic passwords.

Passwords 232

Passwords Computers and Electronics Password Management Artificial Intelligence 232

The Last Watchdog

MAY 11, 2020

Related: How the Middle East has advanced mobile security regulations Over the past couple of decades, meaningful initiatives to improve online privacy and security, for both companies and consumers, incrementally gained traction in the tech sector and among key regulatory agencies across Europe, the Middle East and North America.

Computers and Electronics 113

Computers and Electronics Data privacy Encryption Media 113

Duo's Security Blog

SEPTEMBER 4, 2023

These days, users connect to company resources through a variety of endpoints: desktops, laptops, mobile phones, tablets, wearables…the list goes on. And when it comes to managing access for this plethora of devices, password security just isn’t cutting it anymore. Biometrics Passwords provide no verification of user identity.

Passwords 63

Passwords Authentication Accountability Password Management 63

Duo's Security Blog

MARCH 24, 2023

Our documentary, “ The Life and Death of Passwords ,” explores with industry experts the history of passwords, why passwords have become less effective over time, and how trust is established in a passwordless future. Tell me a little bit about the problems with passwords and how passwordless solves for them.

Passwords 97

Passwords Authentication Password Management Technology 97

Krebs on Security

FEBRUARY 18, 2019

government — along with a number of leading security companies — recently warned about a series of highly complex and widespread attacks that allowed suspected Iranian hackers to siphon huge volumes of email passwords and other sensitive data from multiple governments and private companies. That changed on Jan.

DNS 267

DNS Internet Internet Government 267

Webroot

JUNE 25, 2021

Password predictability is one of the most significant challenges to overall online security. Well aware of this trend, hackers often seek to exploit what they assume are the weak passwords of the average computer user. How are passwords cracked? How are passwords cracked? The problem is password predictability.

Passwords 101

Passwords Password Management Internet Internet 101

Troy Hunt

JANUARY 16, 2019

Collection #1 is a set of email addresses and passwords totalling 2,692,818,238 rows. In total, there are 1,160,253,228 unique combinations of email addresses and passwords. This is when treating the password as case sensitive but the email address as not case sensitive. There are 21,222,975 unique passwords. It'll be 99.x%

Data breaches 280

Data breaches Passwords Password Management Accountability 280

SecureList

FEBRUARY 25, 2021

We previously observed the Lazarus group utilizing this cluster when attacking cryptocurrency businesses and a mobile game company. It’s unknown how the attackers were able to obtain the credentials for that account, but it’s possible the credentials were saved in one of the infected system’s browser password managers.

Malware 132

Malware Phishing Passwords Encryption 132