Malwarebytes

OCTOBER 9, 2023

On Friday October 6, 2023, 23andMe confirmed via a somewhat opaque blog post that threat actors had "obtained information from certain accounts, including information about users’ DNA Relatives profiles." It works because users often use the same password for multiple websites.

Passwords 134

Passwords Accountability Scams Social Engineering 134

Duo's Security Blog

NOVEMBER 10, 2023

10 and over 250 reviews, Duo is honored to share that we won the 2023 TrustRadius Top Rated Award for Authentication. Duo’s Multi-Factor Authentication solution combines multiple authentication factors to provide simple ways to protect users. With a score of 9.3/10 That makes this recognition significant.

Authentication 104

Authentication Education Accountability Technology 104

Duo's Security Blog

SEPTEMBER 16, 2021

At Duo, we're building a passwordless authentication solution that’s as easy to set up as it is to use – with our world-class security baked in. What is Passwordless, Anyway? See the video at the blog post. Your Journey Begins with Multi-Factor Authentication See the video at the blog post.

Authentication 110

Authentication Passwords Phishing CISO 110

Duo's Security Blog

JULY 27, 2023

In this blog, we’ll shed light on exactly how Cisco Duo helps counter and defend against common attack techniques chronicled in MITRE ATT&CK. What is MITRE ATT&CK? Execution Techniques Duo MFA can help mitigate execution techniques that rely on stolen or compromised credentials.

Authentication 98

Authentication Passwords Accountability Firewall 98

Duo's Security Blog

MARCH 4, 2024

Recently, attackers have targeted multi-factor authentication (MFA). MFA is a common second line of defense against compromised passwords. Even if an attacker has access to a username and password, they still need access to the second authentication factor to break into the organization. a device).

Authentication 69

Authentication Social Engineering Passwords Risk 69

Duo's Security Blog

FEBRUARY 15, 2024

What are OTPs (one-time passcodes)? Multi-factor authentication (MFA) is a well-known and well-established protection that many organizations rely on. Therefore, it is not enough to have MFA turned on, organizations must also deploy secure policies to ensure their users are protected.

Social Engineering 114

Social Engineering Authentication Passwords Engineering 114

Krebs on Security

AUGUST 30, 2022

The missives asked users to click a link and log in at a phishing page that mimicked their employer’s Okta authentication page. Those who submitted credentials were then prompted to provide the one-time password needed for multi-factor authentication. Image: Cloudflare.com. ” On July 28 and again on Aug.

Mobile 291

Mobile Phishing Authentication Accountability 291

Duo's Security Blog

OCTOBER 24, 2023

Much like Captain Monica Rambeau’s own journey, MFA is evolving to help security teams protect against a new kind of threat: MFA bypass attacks. In this blog, we’ll discuss some of the ways you can use MFA and features like Duo’s Trusted Endpoints to protect against MFA bypass attacks. What is an MFA bypass attack?

Social Engineering 72

Social Engineering Education Authentication Engineering 72

Duo's Security Blog

MAY 23, 2023

Passwords are a weak point in modern-day secure authentication practices, with Verizon highlighting that almost 50% of breaches start with compromised credentials. What to do when your credentials are compromised How are credentials compromised in the first place? From the OAIC Notifiable Data Breaches Report 2.

Authentication 140

Authentication Passwords Data breaches Phishing 140

Duo's Security Blog

JUNE 12, 2023

Before we can discuss passkeys, we need to lay some groundwork and discuss authentication, Passwordless and WebAuthn. What is authentication? Authentication is the process of verifying your online identity. We added multi-factor authentication (MFA) – something you know and something you have or are.

Authentication 118

Authentication Passwords Password Management Phishing 118

Javvad Malik

NOVEMBER 11, 2021

Cloud usage has increased, we’ve seen VPN’s crop up everywhere, and the shiny hotness that is MFA (multi factor authentication). I’ve said it before, and I’ll say it again: Enabling multi-factor authentication makes you 99% less likely to get hacked. Enable MFA!

VPN 100

VPN Authentication Passwords Scams 100

The Last Watchdog

APRIL 5, 2022

China has enclosed its national internet servers within what is colloquially called ‘the Great Firewall.’ With these factors compounded, it’s only a matter of time before an attacker acquires an email address and password and can simply log in—no need to hack; no need to exploit a zero-day vulnerability.

Hacking 243

Hacking Passwords Firewall Internet 243

Webroot

APRIL 2, 2024

What is a Brute Force Attack? It underscores the necessity for robust password policies and advanced security measures like Multi-Factor Authentication (MFA) and encryption methods resilient against GPU-powered attacks. Think of it as trying every key on a keyring until finding the one that unlocks a door.

Cybersecurity 83

Cybersecurity Passwords VPN Authentication 83

eSecurity Planet

NOVEMBER 21, 2022

The Microsoft Detection and Response Team (DART) recently warned that attackers are increasingly using token theft to circumvent multi-factor authentication (MFA). “After authentication to Azure AD via a browser, a cookie is created and stored for that session,” the team noted.

Authentication 135

Authentication Phishing Password Management Accountability 135

Duo's Security Blog

JANUARY 18, 2023

Multi-Factor Authentication (MFA) is a security tool used by various organizations to protect user credentials, or the username and password. However, MFA has been in the news recently as attackers are finding new and creative ways to get around it. What can organizations do?

Authentication 100

Authentication Phishing Threat Detection Mobile 100

Duo's Security Blog

JULY 21, 2023

Many organizations struggle with authentication processes that frustrate and burden users to the point that they see security as nothing but a point of friction. Here, we explore how Cisco Duo’s risk-based authentication can decrease false positives, accelerate frictionless trusted access, and help you assess risk at the point of login.

Authentication 96

Authentication Risk Engineering Phishing 96

Duo's Security Blog

AUGUST 29, 2022

As cybersecurity leaders have been stepping up efforts to secure all users and applications with multi-factor authentication (MFA), Duo Security is highlighting security best practices that can help deter against malicious attacks. Making sure all users have a valid MFA device is crucial to secure Duo deployment.

Passwords 98

Passwords Authentication Education Internet 98

Duo's Security Blog

OCTOBER 21, 2022

One of these threats that has gained attention includes circumventing an organization’s multi-factor authentication (MFA) protection. MFA fatigue, or when an attacker gets an authentic user to accept a request when that user is not trying to login, is one attack method that has made headlines.

Authentication 93

Authentication Risk Passwords Phishing 93

Duo's Security Blog

OCTOBER 18, 2022

A password manager can go a long way in helping to simplify that process, but multi-factor authentication (MFA) security can help even more. Our experts will discuss the risks posed by passwords, what cyber insurers require to protect organizations, and how MFA can meet both of those needs.

Insurance 54

Insurance Passwords Cyber Insurance Authentication 54

Duo's Security Blog

OCTOBER 18, 2021

These groups are having lots of discussion around the fact that many campuses are required to use multi-factor authentication (MFA) for their cyber liability insurance. In a recent Duo blog post, we gave an overview of cyber liability insurance. As part of National Cybersecurity Awareness Month and “Do Your Part.

Insurance 97

Insurance Education Risk Cyber Insurance 97

Malwarebytes

DECEMBER 4, 2023

When the breach was first announced, 23andMe urged its users to ensure they have strong passwords, to avoid reusing passwords from other sites, and to enable multi-factor authentication (MFA). Every breach is different, so check with the vendor to find out what’s happened, and follow any specific advice they offer.

Passwords 121

Passwords Identity Theft Accountability Data breaches 121

Webroot

MAY 6, 2024

Here’s what you need to know: The Resilience of Ransomware Ransomware remains a formidable adversary, with groups like LockBit demonstrating an uncanny ability to bounce back even after significant law enforcement actions. This resilience requires ongoing vigilance and robust security measures for everyone involved.

Antivirus 84

Antivirus Education Cyber threats Phishing 84

Duo's Security Blog

APRIL 20, 2023

What is phishing? This is part of what makes phishing attacks so dangerous. But what combination can be the most effective for the widest range of users? Totaling up to billions of Australian Dollars at risk each year from hackers and various online scams, it's crucial that organisations (and individuals!)

Phishing 95

Phishing Social Engineering Authentication Engineering 95

CyberSecurity Insiders

APRIL 10, 2023

We spoke with our blog volunteers to get their insights into what best practices their companies are following, along with how you can get on a path to better identity management. What identity management best practices do you find help keep your organization secure? Tomorrow, April 11 is Identity Management Day.

Identity Theft 105

Identity Theft Education Authentication Data breaches 105

Duo's Security Blog

FEBRUARY 6, 2024

Addressing identity-based attacks Duo has made a number of significant investments in identity security over the last several years with the release of Duo’s Trust Monitor, Duo’s Risk-Based Authentication, and moving Duo’s Trusted Endpoints feature into Duo’s Essentials edition. The idea that “identity is the new perimeter” is not new.

Accountability 101

Accountability Authentication Risk Marketing 101

Duo's Security Blog

JUNE 24, 2021

We can map this exact example onto modern multi-factor authentication. There is no question that MFA is a core security control, it plays a key role in stopping credential-based attacks which are still a primary cause of breach. MFA was also required specifically in the most recent Cybersecurity Executive Order.

Phishing 96

Phishing Authentication Education Passwords 96

Malwarebytes

AUGUST 28, 2023

The Cisco Product Security Incident Response Team (PSIRT) has posted a blog about Akira ransomware targeting VPNs without Multi-Factor Authentication (MFA). The Cisco team states that it is aware of reports of the Akira ransomware group going specifically after Cisco VPNs that are not configured for MFA.

Ransomware 85

Ransomware VPN Passwords Backups 85

Cisco Security

OCTOBER 19, 2022

Because the most recent and relevant data is likely to live in the accounts you use regularly, our next step will be to review the full scope of what’s visible from these accounts and to set more intentional boundaries on what is shared. . Set up strong authentication using multi-factor authentication wherever it is supported.

Passwords 109

Passwords Authentication Accountability Password Management 109

NetSpi Technical

JANUARY 18, 2024

Time-Based One-Time Password (TOTP) Time-Based One-Time Password (TOTP) is a common two-factor authentication (2FA) mechanism used across the internet. During authentication, the secret is used in combination with the time in a cryptographic hash function to produce a secure 6-digit passcode. The credentials had been obtained.

Authentication 115

Authentication Passwords Accountability Penetration Testing 115

Duo's Security Blog

FEBRUARY 25, 2021

This report guides you through some big questions and answers about phishing, including: What is social engineering? What is spear-phishing? What happened when a popular company was breached? Phishing and socially engineered attacks can be prevented with multi-factor authentication (MFA or 2FA) in most instances.

Phishing 93

Phishing Social Engineering Engineering Authentication 93

Duo's Security Blog

AUGUST 24, 2022

It can also be challenging for school leaders to break down what new laws mean and what they can do to support pre-existing academic compliance mandates to help secure student data. However, adding two-factor or multi-factor authentication (MFA) cybersecurity may be a good place to start.

Cybersecurity 52

Cybersecurity Education Insurance Authentication 52

Duo's Security Blog

FEBRUARY 16, 2022

Retailers must comply with the Payment Card Industry Data Security Standard (PCI DSS), which mandates the use of multi-factor authentication (MFA) to help protect customers from data breaches. With adaptive policies Duo MFA can restrict access to applications and data on a need-to-know basis.

Retail 100

Retail Cybersecurity Data breaches Passwords 100

The Last Watchdog

JANUARY 27, 2022

So what are some of the specific security risks and challenges that organizations face and best practices to help close the cybersecurity gap in each stage? Many attribute this steady growth to the increase in work-from-home models and adoption of cloud services since the beginning of the COVID-19 pandemic. Lack of documented evidence.

Marketing 265

Marketing Data privacy Risk Accountability 265

Duo's Security Blog

DECEMBER 7, 2022

But what are the risks with this approach? MFA has proven to be a strong preventative strategy against stolen credentials and brute-force attacks. MFA has proven to be a strong preventative strategy against stolen credentials and brute-force attacks. Of course, insurance cover is not the only measure that can be taken.

Insurance 98

Insurance Cyber Insurance Ransomware Risk 98

Duo's Security Blog

JANUARY 25, 2023

Duo is here to help you For customers starting their zero-trust network access (ZNTA) journey with Duo multi-factor authentication (MFA) , TLS 1.0 and weak ciphers for those using our MFA solution starting June 30, 2023*. and weak ciphers for those using our MFA solution starting June 30, 2023*. deprecation.

Encryption 95

Encryption Technology Risk Authentication 95

Duo's Security Blog

SEPTEMBER 23, 2021

Today, weep not for the memories of what was, but rejoice because the answer will soon be, “Yes.” With Duo’s Trusted Sessions feature, the team reduced multi-factor authentication (MFA) fatigue without compromising on security. "We Sarah McLachlan, a sage of our time, once opined, “I will remember you.

Authentication 95

Authentication Engineering Manufacturing Technology 95

The Last Watchdog

SEPTEMBER 26, 2022

Thanks to the emergence of today’s hybrid and multi-cloud environments and factors like remote work, ransomware attacks continue to permeate each industry. The third is identity – the validation that a requestor is who they say they are and has the ability and limitation to do only what they should. Dodhiawala.

Ransomware 220

Ransomware Passwords Data breaches Accountability 220