Duo's Security Blog

DECEMBER 6, 2022

When someone is told that passwords are going away in favor of a new, “password-less” authentication method, a healthy dose of skepticism is not unwarranted. Passwordless authentication refers to a system that does not require the use of passwords at all. What is WebAuthn?

Architecture 103

Architecture Authentication Passwords Technology 103

Duo's Security Blog

MAY 4, 2023

Our documentary, “ The Life and Death of Passwords ,” explores with industry experts the history of passwords, why passwords have become less effective over time, and how trust is established in a passwordless future. The problems with passwords Chrysta: Why was passwordless needed in the first place? See the video at the blog post.

Passwords 98

Passwords Authentication DNS Technology 98

Duo's Security Blog

MARCH 2, 2021

There’s no denying that passwordless is a hot topic. What is Passwordless Authentication? For those wondering what “passwordless” even means - here’s a quick definition: Passwordless authentication establishes a strong assurance of a user's identity without relying on passwords.

Authentication 102

Authentication Passwords Technology Mobile 102

Duo's Security Blog

JUNE 3, 2021

It’s 2021 and you’re an administrator or security engineer trying to figure out what this whole “passwordless” thing is about. What does it mean to go without them now? Not every passwordless product or system meets this high bar. See the video at the blog post. What the Heck Is a Passwordless?

Authentication 100

Authentication Passwords Phishing Accountability 100

Duo's Security Blog

NOVEMBER 3, 2022

If you already read our first post about getting started on your passwordless journey , you’ve already learned about the importance of cataloging the applications in your environment and building a plan around them. Evaluating your authentication options Duo has always focused on providing a variety of authentication options for end users.

Authentication 96

Authentication Mobile Passwords Risk 96

Duo's Security Blog

MARCH 4, 2024

Recently, attackers have targeted multi-factor authentication (MFA). Even if an attacker has access to a username and password, they still need access to the second authentication factor to break into the organization. So, what can organizations do to better protect themselves? However, attackers are finding ways around MFA.

Authentication 69

Authentication Social Engineering Passwords Risk 69

Duo's Security Blog

JULY 15, 2021

Part of our Administrator's Guide to Passwordless blog series See the video at the blog post. In some ways, the term “passwordless” is a misnomer. Passwordless uses multiple factors in one step. Unlocking authenticator devices locally removes the threats of credential reuse and shared secrets.

Phishing 100

Phishing Authentication Passwords Risk 100

Duo's Security Blog

MARCH 30, 2021

What’s Coming I’m excited to share that Cisco is announcing Duo’s passwordless authentication. Duo passwordless authentication will be available for public preview beginning summer 2021. Workforces are ready for passwordless authentication. Passwordless has arrived. It has to be simple.

Authentication 98

Authentication Passwords Internet Internet 98

Duo's Security Blog

MAY 12, 2023

Our documentary, “ The Life and Death of Passwords ,” explores with industry experts the history of passwords, why passwords have become less effective over time, and how trust is established in a passwordless future. Why is a shift to passwordless necessary? Ted: Passwords have a bunch of problems from a user perspective.

Passwords 52

Passwords Authentication Mobile Technology 52

Duo's Security Blog

MARCH 15, 2021

The Progression to Passwordless Authentication Let’s look at the natural progression of life. The Progression to Passwordless Authentication Let’s look at the natural progression of life. The next step is the move into multi-factor authentication (MFA ). But, what about the future? This is the way.

Authentication 97

Authentication Passwords Password Management Firewall 97

Duo's Security Blog

MAY 23, 2023

Passwords are a weak point in modern-day secure authentication practices, with Verizon highlighting that almost 50% of breaches start with compromised credentials. What to do when your credentials are compromised How are credentials compromised in the first place? From the OAIC Notifiable Data Breaches Report 2.

Authentication 139

Authentication Passwords Data breaches Phishing 139

Duo's Security Blog

JULY 13, 2021

What does this mean for Duo? Featured Duo Talks Evaluating Passwordless: Cutting Through the Noise with Three Metrics In this talk, Duo Product Marketing Manager Ted Kietzman will share three technical metrics you can use to assess a passwordless solution, highlighting some potential pitfalls of “passwordless” along the way.

CISO 100

CISO CSO Authentication Passwords 100

Duo's Security Blog

JANUARY 18, 2023

Multi-Factor Authentication (MFA) is a security tool used by various organizations to protect user credentials, or the username and password. What can organizations do? As a first step, organizations need to modernize their authentication, moving away from RADIUS or LDAP protocols and moving towards SAML.

Authentication 99

Authentication Phishing Threat Detection Mobile 99

Duo's Security Blog

FEBRUARY 15, 2024

What are OTPs (one-time passcodes)? Multi-factor authentication (MFA) is a well-known and well-established protection that many organizations rely on. Several common authentication methods include the use of one-time passcodes (OTP). And that also makes it a target for cybercriminals.

Social Engineering 114

Social Engineering Authentication Passwords Engineering 114

Duo's Security Blog

JUNE 17, 2021

See the video at the blog post. If you go by just the name, “Passwordless” could refer to any login experience that doesn’t require a password. In considering a passwordless solution, we want to raise the security bar, not lower it. See the video at the blog post. For instance, someone who stole the authenticator device.

Authentication 53

Authentication Manufacturing Passwords Accountability 53

Duo's Security Blog

SEPTEMBER 13, 2023

In November 2022, we announced the general availability of Duo Passwordless. With this release, many high security and low friction authentication methods were made available. What makes these methods so secure? What is WebAuthn? WebAuthn allows servers to register and authenticate users using Public Key Cryptography.

Authentication 54

Authentication Encryption eCommerce Phishing 54

eSecurity Planet

NOVEMBER 21, 2022

The Microsoft Detection and Response Team (DART) recently warned that attackers are increasingly using token theft to circumvent multi-factor authentication (MFA). “After authentication to Azure AD via a browser, a cookie is created and stored for that session,” the team noted. How to Respond to Token Theft.

Authentication 135

Authentication Phishing Password Management Accountability 135

Duo's Security Blog

FEBRUARY 6, 2024

Addressing identity-based attacks Duo has made a number of significant investments in identity security over the last several years with the release of Duo’s Trust Monitor, Duo’s Risk-Based Authentication, and moving Duo’s Trusted Endpoints feature into Duo’s Essentials edition. The idea that “identity is the new perimeter” is not new.

Accountability 95

Accountability Authentication Risk Marketing 95

The Last Watchdog

APRIL 13, 2021

Sure, a lot think about their users and what types of credentials they’ll need for their various systems. But what about the numerous machines on a company’s network, like mobile devices, servers, applications, and IoT devices? Related: The role of facial recognition. Know, trust, verify.

Authentication 191

Authentication Mobile Technology IoT 191

CyberSecurity Insiders

JANUARY 10, 2022

This blog was written by an independent guest blogger. I was logging into one of my favorite online shopping sites the other day, and, as with all my other sites, I was presented with the multi-factor authentication prompt to complete the login process. These codes can be stored in a safe place.

Backups 103

Backups Authentication Password Management Passwords 103

Duo's Security Blog

FEBRUARY 6, 2024

In partnership with the Cyentia Institute, Duo analyzed data from more than 16 billion authentications, spanning nearly 52 million different browsers, on 58 million endpoints and 21 million unique phones across regions including North America, Latin America, Europe, the Middle East, and Asia Pacific. Why should you care about identity sprawl?

Authentication 61

Authentication Accountability Threat Detection Risk 61

Duo's Security Blog

JANUARY 8, 2024

While understanding these types of attacks can seem intimidating, it is important to know what an AiTM attack is and how it works to safeguard your users and your organization. What is an AiTM attack? Clicking the link routes the user to a proxy server which is typically identical to the authentic web page, except the URL.

Authentication 60

Authentication Phishing Passwords Encryption 60

Duo's Security Blog

DECEMBER 14, 2023

What is social engineering? An attack in action Logging into work on a typical day, John, an employee at Acme Corp. receives an email from the IT department. The email informs John that the company suffered a security breach, and it is essential for all employees to update their passwords immediately. John is a diligent employee.

Social Engineering 111

Social Engineering Engineering Phishing Passwords 111

Security Affairs

MAY 11, 2023

Once an email address is discovered on the dark web, Google will urge users to enable two-step authentication (2FA) to protect their Google accounts. will be able to run scans to see if your Gmail address appears on the dark web and receive guidance on what actions to take to protect yourself. . ” states the announcement.

Marketing 94

Marketing Accountability VPN Data breaches 94

Duo's Security Blog

OCTOBER 21, 2022

One of these threats that has gained attention includes circumventing an organization’s multi-factor authentication (MFA) protection. MFA fatigue, or when an attacker gets an authentic user to accept a request when that user is not trying to login, is one attack method that has made headlines. What is MFA fatigue?

Authentication 88

Authentication Risk Passwords Phishing 88

Malwarebytes

MAY 10, 2023

Google has just brought users closer to a passwordless future. In a recent blog post , the tech giant introduced the option to create and use a safer, more convenient alternative to passwords: Passkeys , a form of digital credential. As the authors of the blog put it: "Using passwords puts a lot of responsibility on users.

Passwords 94

Passwords Accountability Phishing Mobile 94

Cisco Security

JANUARY 10, 2023

This gives me an invaluable macroview not only of how the last 12 months have affected organizations and what CISOs are thinking about, but also how the upcoming year is shaping up. Using this information, last year I wrote a blog summing up the nine top of mind issues I believed will most impact CISOs as we headed into 2022.

CISO 138

CISO Insurance Cyber Insurance Phishing 138

Duo's Security Blog

MAY 2, 2023

With the new policy endpoints, you can control policy changes more closely, track precisely what changes have been made, and even prevent unwanted changes by making policies readable outside of the Admin Panel. Control How many people at your organization have the ability to change your policies? Keep an eye out!

Accountability 98

Accountability Authentication Education Risk 98

Duo's Security Blog

NOVEMBER 10, 2020

The time has come where we analyze authentication data and produce our wildly popular Duo Trusted Access Report. The report examines 26 million devices used for work and 700 million user authentication events per month to more than 500,000 unique corporate applications, based on de-identified and aggregated data from Duo’s customer base.

Authentication 75

Authentication CISO VPN Technology 75

Malwarebytes

SEPTEMBER 20, 2021

In a recent blog Microsoft announced that as of September 15, 2021 you can completely remove the password from your Microsoft account and use the Microsoft Authenticator app, Windows Hello, a security key, or a verification code sent to your phone or email to sign in to Microsoft apps and services. And what happens when they have them?

Passwords 85

Passwords Accountability Authentication Phishing 85

Duo's Security Blog

OCTOBER 18, 2021

These groups are having lots of discussion around the fact that many campuses are required to use multi-factor authentication (MFA) for their cyber liability insurance. In a recent Duo blog post, we gave an overview of cyber liability insurance. As part of National Cybersecurity Awareness Month and “Do Your Part.

Insurance 96

Insurance Education Risk Cyber Insurance 96

Security Affairs

APRIL 8, 2022

Authentication. Two-factor authentication is another important security measure for the cloud era. Increasingly, passwordless authentication is becoming the norm. Be careful what you click. Be careful what you click, even if the link looks harmless. Use a reputable cloud service provider.

Cybersecurity 103

Cybersecurity Passwords Penetration Testing Encryption 103

Duo's Security Blog

OCTOBER 1, 2022

From: Traditional Prompt To: Universal Prompt What is the Duo Universal Prompt? The Universal Prompt is Duo's next-generation authentication experience that delivers an easier, more secure, and more accessible authentication experience for every user.

Authentication 53

Authentication Social Engineering Risk Software 53

SC Magazine

MAY 7, 2021

Google announced that it will automatically enroll users in multifactor authentication – what they are calling two-step verification. Using their mobile device to sign in gives people a safer and more secure authentication experience than passwords alone,” Risher said. Photo by Mario Tama/Getty Images).

Authentication 89

Authentication Passwords Password Management Mobile 89

Thales Cloud Protection & Licensing

MAY 13, 2021

With businesses moving to the cloud at high speed, there is an increasing need to protect digital identities and ensure a strong authentication and au-thorization mechanism to prevent attacks from happening. The product delivered exactly what we needed and without any added hassle. Thu, 05/13/2021 - 09:06.

Authentication 87

Authentication Digital transformation Marketing Healthcare 87

Google Security

MAY 11, 2022

Posted by Daniel Margolis, Software Engineer, Google Account Security Team Every year, security technologies improve: browsers get better , encryption becomes ubiquitous on the Web , authentication becomes stronger. This blog will deep dive into the method of phishing and how it has evolved today.

Phishing 106

Phishing Scams Authentication Accountability 106

Duo's Security Blog

JANUARY 8, 2021

Yet, some of what we were looking for did come to pass. Setting that aside for the moment, a significant number of organizations deployed strong authentication , adaptive and risk-based access , endpoint device health , and brought these tactics together to secure people working in ways we never imagined back in 2019. Well, it was.

Digital transformation 62

Digital transformation Phishing Authentication DDOS 62