Duo's Security Blog

FEBRUARY 15, 2023

You might recognize the term executive business review. You might have heard it called Health Check, Account Review, Quarterly Business Review, Report Card, or something else. Customer Success teams at different SaaS companies have called these meetings any number of things - but what do the meetings actually entail?

Engineering 52

Engineering Accountability Information Security CISO 52

Security Boulevard

OCTOBER 7, 2022

7 Things Every CISO Needs to Know About PKI. Why Public Key Infrastructure Is So Important. A public key infrastructure (PKI) is responsible for supporting public encryption keys while also enabling users and computers to safely exchange data over networks and verify the identity of other parties. Alexa Cardenas.

CISO 52

CISO Risk Cyber Attacks Technology 52

ForAllSecure

MAY 30, 2023

But there are a lot of tools out there, and you don’t want to purchase tools that won’t be used or more tools than you need. So what DevSecOps tools do you need? And what’s the best way to buy as few tools as possible while still conducting comprehensive security testing?

Software 40

Software Penetration Testing Marketing Technology 40

ForAllSecure

FEBRUARY 23, 2021

Then I sat down and talked to an astronomer, and found out that much of his time was spent writing proposals, getting shot down, then writing new proposals, then, once the proposal was approved by the department, negotiating time on the massive university telescope -- all of which means maybe you get a few hours of actual sky time each year.

Penetration Testing 52

Penetration Testing InfoSec Cyber Attacks Education 52

ForAllSecure

FEBRUARY 23, 2021

Then I sat down and talked to an astronomer, and found out that much of his time was spent writing proposals, getting shot down, then writing new proposals, then, once the proposal was approved by the department, negotiating time on the massive university telescope -- all of which means maybe you get a few hours of actual sky time each year.

Penetration Testing 52

Penetration Testing InfoSec Cyber Attacks Education 52

Approachable Cyber Threats

DECEMBER 21, 2023

This blog post will explore the evolving threat landscape of supply chain attacks, highlighting recent statistics and offering practical recommendations for organizations looking to strengthen their cybersecurity posture. What are supply chain attacks? Why does it seem like supply chain attacks are increasing?

Risk 105

Risk Cybersecurity Software Government 105

Centraleyes

JANUARY 7, 2024

A single data breach can compromise your ability to operate, generate revenue, and ruin the reputation you’ve spent years building with your clients, business partners, and vendors. While you can hire the services of third-party consultants, you may lose a certain level of control over your organizational risks.

Cyber Risk 52

Cyber Risk Risk Penetration Testing Cybersecurity 52

Approachable Cyber Threats

DECEMBER 21, 2023

This blog post will explore the evolving threat landscape of supply chain attacks, highlighting recent statistics and offering practical recommendations for organizations looking to strengthen their cybersecurity posture. What are supply chain attacks? Why does it seem like supply chain attacks are increasing?

Risk 52

Risk Cybersecurity Software Government 52

Security Boulevard

JANUARY 27, 2022

AppSec teams may need to coordinate with security and ops teams from cloud service providers (CSPs) to ensure proper coverage and to adapt cloud-specific best practices. This blog covers AppSec cloud best practices and offers a basic framework on how to think about cloud AppSec. Why Cloud AppSec is Shifting Left.

Software 98

Software Risk Encryption Accountability 98

ForAllSecure

MARCH 30, 2022

It’s about how they started with a deliberately misconfigured version of CosmosDB and ended up with complete unrestricted access to the accounts and the databases of thousands of Microsoft Azure customers. Owner: May I help you with something? Then I decided to hack you. I know you run a website called Plato’s Boys.

Firewall 52

Firewall Authentication Encryption Accountability 52

Duo's Security Blog

MAY 10, 2023

Why is layered security essential against phishing? As mentioned in our previous post breaking down what modern-day phishing attacks look like , experts recommend that a layered approach to security can prevent single-point vulnerabilities and catch the most phish. PCI DSS, HIPAA, etc.)

Phishing 54

Phishing DNS Authentication Risk 54

Security Boulevard

NOVEMBER 18, 2021

The top ten vulnerabilities that threaten your API, how to identify them, and how to prevent them. Today, let’s go through each of these vulnerabilities to understand how they happen, how to identify them, and how to prevent them. There is no identity check in place before users access individual data objects.

Authentication 64

Authentication Accountability Passwords Engineering 64

Security Affairs

FEBRUARY 25, 2024

Last week, a joint law enforcement action, code-named Operation Cronos , conducted by law enforcement agencies from 11 countries disrupted the LockBit ransomware operation. The NCA will reach out to victims based in the UK in the coming days and weeks, providing support to help them recover encrypted data. ” wrote the gang.

Government 131

Government Hacking Cryptocurrency Penetration Testing 131