Duo's Security Blog

MAY 10, 2023

Effectively protecting complex networks against sophisticated phishing attacks involves a comprehensive security stack including multi-factor authentication (MFA) , single sign-on (SSO) , and domain name system (DNS) security. Why is layered security essential against phishing? PCI DSS, HIPAA, etc.) We didn't even need to switch screens.”

Phishing 54

Phishing DNS Authentication Risk 54

Duo's Security Blog

JANUARY 27, 2022

Not all multi-factor authentication (MFA) solutions are equal. With Duo, we were able to bring consistent security controls across all of our apps by streamlining to one MFA and SSO solution at a much lower total cost of ownership…. A multi-functional MFA platform/portfolio player like Duo-Cisco helps you avoid these costs.

Authentication 71

Authentication Software Mobile Passwords 71

Security Boulevard

OCTOBER 2, 2023

This blog examines the escalating phishing landscape, shortcomings of common anti-phishing approaches, and why implementing a Protective DNS service as part of a layered defense provides the most effective solution. User education is unreliable when faced with highly-refined psychological manipulation tailored to override caution.

DNS 64

DNS Phishing Social Engineering Engineering 64

Krebs on Security

MARCH 23, 2022

In a blog post published Mar. For a fee, the willing accomplice must provide their credentials and approve the MFA prompt or have the user install AnyDesk or other remote management software on a corporate workstation allowing the actor to take control of an authenticated system.

Social Engineering 295

Social Engineering Accountability Mobile Passwords 295

Security Boulevard

NOVEMBER 9, 2023

When I first started diving into offensive Slack access, one of the best public resources I found was a blog post by Cody Thomas from back in 2020 (which I highly recommend giving a read). This BOF simply reads the memory of a remote Office process and searches the returned buffer for JSON web tokens (JWTs) related to Microsoft services.

Passwords 83

Passwords Social Engineering Encryption Engineering 83

Malwarebytes

JULY 23, 2021

This blog post was authored by Hasherezade. In this blog we will take a look at AvosLocker a solid, yet not too fancy new ransomware family that has already claimed several victims. Its authors started searching for affiliates through various underground forums. Example: calling a function just after searching it.

Ransomware 131

Ransomware Encryption Malware Backups 131

Security Boulevard

JUNE 14, 2021

This blog post is divided into four parts: Introduction : provides an overview of what happened. Good news: The variant discussed in this blog does not appear to persist : in other words, after a reboot, its process will not be active anymore, at least for the variant discussed in this blog post. Detection. .

Antivirus 142

Antivirus Accountability Malware Passwords 142

Thales Cloud Protection & Licensing

OCTOBER 10, 2022

This information has such value that it has become the currency for service providers such as search engines and social media providers. In this blog post I will discuss just a few of these insights. This includes forcing service providers to utilise encryption and multi factor authentication (MFA).

Data breaches 71

Data breaches Government Media Retail 71

Duo's Security Blog

SEPTEMBER 6, 2023

We have a lot of thoughts on passkeys – some of which we’ve shared in other posts in this passkey blog series – and today we’re going to explore how passkeys stack up against passwords from the perspective of cloud platforms. That’s why many tech companies are turning to passkeys as a more secure and convenient replacement.

Passwords 80

Passwords Password Management Authentication Threat Detection 80

Duo's Security Blog

SEPTEMBER 21, 2021

Many consider self-service solutions, possibly secured with Duo MFA, to help. Once they’re selected from the search results, we see a number of Quick Verification options, including Duo. So it comes as no surprise that most businesses want to improve the productivity of their IT help desks and address the password reset cost problem.

Passwords 69

Passwords Social Engineering Authentication Engineering 69

Cisco Security

AUGUST 26, 2022

When you pivot into Exabeam and search for an observable in all the log messages, the results of the search are displayed in the Exabeam UI. SecureX orchestration atomic actions for Censys is now available and includes: Basic Search. SecureX orchestration atomic actions for Shodan include: Basic Search. Read more here.

Firewall 116

Firewall Authentication Passwords Threat Detection 116

Malwarebytes

JULY 23, 2021

This blog post was authored by Hasherezade. In this blog we will take a look at AvosLocker a solid, yet not too fancy new ransomware family that has already claimed several victims. Its authors started searching for affiliates through various underground forums. Example: calling a function just after searching it.

Ransomware 86

Ransomware Encryption Malware Backups 86

BH Consulting

DECEMBER 11, 2023

The report recommends steps to prevent breaches, such as making MFA mandatory, turning on features that make storage buckets private, and discovering any publicly exposed workloads. These practices can lead to account compromise, or enabling unauthorised users to access sensitive data and escalate privileges.

Surveillance 52

Surveillance Cybersecurity DDOS Data breaches 52

Cisco Security

OCTOBER 19, 2022

Weak or reused passwords are most vulnerable to attack, and as you most likely discovered during your HaveIBeenPwned search, the odds are better than not that you found your username or email in at least one previous breach. . Multi-factor authentication is often shortened to MFA and can also be referred to as two-step authentication or 2FA.

Passwords 104

Passwords Authentication Accountability Password Management 104

Duo's Security Blog

NOVEMBER 16, 2021

Furthermore, the SSO application dashboard for end users should be protected with multi-factor authentication (MFA) to reduce risks of phishing and other identity attacks that could compromise credentials. The administrator should also be able to generate reports and analytics of anomalous user behavior.

Passwords 78

Passwords Authentication VPN Data breaches 78

Krebs on Security

SEPTEMBER 5, 2023

” Monahan has been documenting the crypto thefts via Twitter/X since March 2023, frequently expressing frustration in the search for a common cause among the victims. Then on Aug. Perhaps the best answer to this question comes from Wladimir Palant , a security researcher and the original developer behind the Adblock Plus browser plugin.

Cryptocurrency 351

Cryptocurrency Passwords Encryption Accountability 351

Thales Cloud Protection & Licensing

JANUARY 7, 2021

This blog will introduce access management evaluation criteria guidelines and discuss what features you should look for and what vendors to consider for your next employee access management solution. To mitigate the risk of these attacks, risk officers and IT managers are searching for Single Sign On or SSO solutions.

Authentication 62

Authentication VPN Passwords Risk 62

Identity IQ

APRIL 12, 2023

In this blog, we cover the top-seven data security practices every workplace should implement to help protect valuable information and more. If you don’t already use multi-factor authentication (MFA) to access your work accounts, you should start. Why is Data Security Important in the Workplace?

Passwords 52

Passwords Data breaches Antivirus Password Management 52

Krebs on Security

MARCH 29, 2022

But there’s no real mechanism defined by most Internet service providers or tech companies to test the validity of a search warrant or subpoena. ” The idea of impersonating law enforcement officers to obtain information typically only available via search warrant or subpoena is hardly new.

Accountability 276

Accountability Government Hacking Social Engineering 276

Herjavec Group

SEPTEMBER 24, 2021

T1083 File and Directory Discovery BlackMatter uses native functions to enumerate files and directories searching for targets to encrypt. . Enable multifactor authentication (MFA) for all user accounts if able. . 6] “BlackMatter Ransomware Analysis; The Dark Side Returns | McAfee Blogs.” Accessed: Aug. Available: [link] . [6]

Ransomware 109

Ransomware Manufacturing Energy and Utilities Encryption 109

Cisco Security

AUGUST 30, 2021

Be sure to check out the bonus tip at the end of the blog and share in the comments other ways your organization is successfully securing APIs. Use short-lived access tokens, proper password storage, multi-factor authentication (MFA), and always authenticate your apps. I recommend working the list top down.

Software 108

Software Authentication Risk Encryption 108

Security Boulevard

MARCH 24, 2022

2 ] The threat actor leveraged a set of misconfigured Multi-Factor Authentication (MFA) accounts that enabled it to enroll a new device for MFA and to access the victim network. Kevin Beaumont, “@cyb3rops VirusTotal search if you want ’em [.],” @GossiTheDog, Jan. Like other cyber-criminal operations (e.g., link] (accessed Mar.

Ransomware 59

Ransomware Malware Government Antivirus 59

Digital Shadows

NOVEMBER 10, 2022

These malicious apps constitute a risk for customers and developers alike—and they can be easily found online using the most common search engines. Once in control of a user’s credentials, the attackers can access said account most of the time, unless proper defenses like multi-factor authentication (MFA) were previously put in place.

Cyber threats 52

Cyber threats Media Social Engineering Mobile 52

The Last Watchdog

FEBRUARY 28, 2021

A common adware program might redirect a user’s browser searches to look-alike web pages that contain other product promotions. Single Sign-on (SSO) and Multi-factor Authentication (MFA) mechanisms are implemented to protect against keylogging. •In

Cyber threats 113

Cyber threats Computers and Electronics Adware Spyware 113

Security Boulevard

AUGUST 2, 2022

In this blog, we describe details of the tactics, techniques and procedures (TTPs) involved in the campaign. Since the campaign is active at the time of blog publication, the list of indicators of compromise (IOCs) included at the end of the blog should not be considered an exhaustive list. Key points.

Phishing 52

Phishing Energy and Utilities Authentication Accountability 52

Cisco Security

MAY 27, 2022

In part one of our Black Hat Asia 2022 NOC blog , we discussed building the network with Meraki: . With SecureX sign-on we can log into all the products only having to type a password one time and approve one Cisco DUO Multi-Factor Authentication (MFA) push. Meraki MR, MS, MX and Systems Manager by Paul Fidler .

Malware 73

Malware Accountability DNS Technology 73