Duo's Security Blog

FEBRUARY 15, 2024

What are OTPs (one-time passcodes)? Multi-factor authentication (MFA) is a well-known and well-established protection that many organizations rely on. Therefore, it is not enough to have MFA turned on, organizations must also deploy secure policies to ensure their users are protected.

Social Engineering 120

Social Engineering Authentication Passwords Engineering 120

NetSpi Technical

JANUARY 18, 2024

The code needed to brute force the TOTP code had been written, and now it was just a matter of time. Satisfied, the hacker leaned back with a wry smile on his lips and thought, “ I am the admin now.” TOTP operates by generating dynamic, time-sensitive passcodes that are typically valid for 30 seconds.

Authentication 109

Authentication Passwords Accountability Penetration Testing 109

Duo's Security Blog

APRIL 19, 2022

OTPs (One-time passwords) have become mainstream because a randomly generated one-time use code solves many of the security problems associated with a static password associated with a static account. What is a One-Time Password? Is the URL secure (https)? Deny any suspicious authorization request.

Passwords 76

Passwords Authentication Phishing Accountability 76

Daniel Miessler

SEPTEMBER 27, 2020

When done correctly it gives you the ability to adjust your defensive behaviors based on what you’re facing in real-world scenarios. The problem we have as humans is that opportunity is usually coupled with risk, so the question is one of which opportunities should you take and which should you pass on. When do you stop?

VPN 326

VPN Risk Hacking Encryption 326

Security Boulevard

SEPTEMBER 17, 2022

Using this disguise, the perpetrator knows that all they have to do is convince one employee or contractor to share their credentials to gain a foothold into the targeted company's internal network. This tactic is called social engineering and is one of the key methods used in attacks that result in data breaches.

Social Engineering 76

Social Engineering Education Technology Artificial Intelligence 76

eSecurity Planet

SEPTEMBER 15, 2021

Nobody likes passwords,” Vasu Jakkal, corporate vice president for security, compliance and identity at Microsoft, wrote in a blog post today. In a recent Microsoft Twitter poll, one in five people reported they would rather accidentally ‘reply all’ Than reset a password. Passwords are Unpopular. They’re inconvenient.

Accountability 104

Accountability Passwords Authentication Phishing 104