Duo's Security Blog

OCTOBER 4, 2023

Enabling multi-factor authentication 3. Updating software Cisco Duo is all about cybersecurity, so every week we’re going to publish a blog focused on those respective topics. Future The future of passwords is really to have no future at all, or go “passwordless”. Using strong passwords and a password manager 2.

Password Management 113

Password Management Passwords Authentication Social Engineering 113

Duo's Security Blog

SEPTEMBER 27, 2021

The Promise of Passwordless If you've been following the evolution of passwordless, you've likely read countless blog posts and whitepapers pondering the promise of this technology. Before continuing on, it should be noted that all passwordless is not the same. We shouldn’t necessarily trivialize this promise.

Passwords 92

Passwords Authentication Technology Data breaches 92

Duo's Security Blog

DECEMBER 14, 2023

A few days later, John finds himself locked out of his account, and quickly learns that the password reset link he clicked earlier did not come from his company. A few days later, John finds himself locked out of his account, and quickly learns that the password reset link he clicked earlier did not come from his company.

Social Engineering 111

Social Engineering Engineering Phishing Passwords 111

Duo's Security Blog

MAY 4, 2023

Our documentary, “ The Life and Death of Passwords ,” explores with industry experts the history of passwords, why passwords have become less effective over time, and how trust is established in a passwordless future. The problems with passwords Chrysta: Why was passwordless needed in the first place? See the video at the blog post.

Passwords 97

Passwords Authentication DNS Technology 97

Duo's Security Blog

MARCH 2, 2022

Multi-factor authentication is one of the best ways to thwart bad actors using stolen credentials — but it’s not foolproof. Here’s how bad actors are circumventing MFA protection, and 11 ways Duo can help you strengthen your security posture beyond standard MFA. First, let’s dissect the structure of using these kits.

Authentication 88

Authentication Phishing DNS Passwords 88

Duo's Security Blog

JULY 13, 2021

What does this mean for Duo? Featured Duo Talks Evaluating Passwordless: Cutting Through the Noise with Three Metrics In this talk, Duo Product Marketing Manager Ted Kietzman will share three technical metrics you can use to assess a passwordless solution, highlighting some potential pitfalls of “passwordless” along the way.

CISO 100

CISO CSO Authentication Passwords 100

Duo's Security Blog

SEPTEMBER 1, 2023

And is it realistic to consider passkeys – and the passwordless solutions they support – as a valid alternative for traditional password security? We’ve been answering these questions in this blog series by unpacking the pros and cons of passkey technology from different authentication perspectives. Passkeys are split.

Passwords 56

Passwords Authentication Phishing Technology 56

Duo's Security Blog

OCTOBER 18, 2023

Cisco Duo supports phishing-resistant passwordless authentication and zero trust access that can help mitigate common breach scenarios that are plaguing the IT security industry and can negatively impact your business. You must avoid email address and perform URL spot-checks as sender verification methods.

Phishing 145

Phishing Security Awareness Software Media 145

Duo's Security Blog

FEBRUARY 6, 2024

Addressing identity-based attacks Duo has made a number of significant investments in identity security over the last several years with the release of Duo’s Trust Monitor, Duo’s Risk-Based Authentication, and moving Duo’s Trusted Endpoints feature into Duo’s Essentials edition.

Accountability 81

Accountability Authentication Risk Marketing 81

Duo's Security Blog

SEPTEMBER 13, 2023

In November 2022, we announced the general availability of Duo Passwordless. With this release, many high security and low friction authentication methods were made available. Duo understands that organizations are at varying levels of modernization and may still depend on the use of MFA for some or all their applications.

Authentication 54

Authentication Encryption eCommerce Phishing 54

Duo's Security Blog

FEBRUARY 7, 2023

At Duo Security, we’re on a mission to secure user access to applications while lightening the load on IT teams. So today, we are announcing that Duo Single Sign-On (SSO) support for OpenID Connect is going to be generally available, so that organizations that require users to use these applications can seamlessly and securely do so.

Mobile 53

Mobile Authentication Passwords Engineering 53

Duo's Security Blog

JULY 15, 2021

Part of our Administrator's Guide to Passwordless blog series See the video at the blog post. In some ways, the term “passwordless” is a misnomer. Passwordless uses multiple factors in one step. Unlocking authenticator devices locally removes the threats of credential reuse and shared secrets.

Phishing 100

Phishing Authentication Passwords Risk 100

Duo's Security Blog

JANUARY 8, 2024

Clicking the link routes the user to a proxy server which is typically identical to the authentic web page, except the URL. The proxy page allows the attacker to steal the user's valid session cookies, bypassing the traditional authentication process. What is an AiTM attack? The user might not even need to give up their password.

Authentication 60

Authentication Phishing Passwords Encryption 60

Duo's Security Blog

MARCH 15, 2021

Sure you can use it to lock your front door but if someone of a nefarious nature managed to find that key there is nothing to say who should or should not be coming through the front door. The Progression to Passwordless Authentication Let’s look at the natural progression of life. This is the way. Therein lies the rub.

Authentication 88

Authentication Passwords Password Management Firewall 88

Duo's Security Blog

SEPTEMBER 6, 2023

But conventional protection solutions, like password security, fall short when it comes to efficacy. While there are areas where passkeys could be better, it is clear that they are the leading contender to improve authentication by an order of magnitude and bring an end to passwords.

Passwords 96

Passwords Password Management Authentication Threat Detection 96

Duo's Security Blog

OCTOBER 1, 2022

Earlier this year, Duo Security announced the General Availability of the Duo Universal Prompt, and many customers have happily upgraded to it from the Duo Traditional Prompt. From: Traditional Prompt To: Universal Prompt What is the Duo Universal Prompt?

Authentication 53

Authentication Social Engineering Risk Software 53

Duo's Security Blog

OCTOBER 21, 2022

One of these threats that has gained attention includes circumventing an organization’s multi-factor authentication (MFA) protection. MFA fatigue, or when an attacker gets an authentic user to accept a request when that user is not trying to login, is one attack method that has made headlines. What is MFA fatigue? What is MFA fatigue?

Authentication 74

Authentication Risk Passwords Phishing 74

Duo's Security Blog

NOVEMBER 10, 2020

The time has come where we analyze authentication data and produce our wildly popular Duo Trusted Access Report. The 2020 Duo Trusted Access Report details the security state of thousands of the world’s largest and fastest-growing organizations. This year our report is also interactive! This year’s report is our best yet!

Authentication 74

Authentication CISO VPN Technology 74

Duo's Security Blog

OCTOBER 18, 2021

These groups are having lots of discussion around the fact that many campuses are required to use multi-factor authentication (MFA) for their cyber liability insurance. In a recent Duo blog post, we gave an overview of cyber liability insurance. As part of National Cybersecurity Awareness Month and “Do Your Part.

Insurance 86

Insurance Education Risk Cyber Insurance 86

Duo's Security Blog

MAY 12, 2023

Our documentary, “ The Life and Death of Passwords ,” explores with industry experts the history of passwords, why passwords have become less effective over time, and how trust is established in a passwordless future. Why is a shift to passwordless necessary? And then I also just don’t like to type them. It’s annoying for my fingers.

Passwords 52

Passwords Authentication Mobile Technology 52

Duo's Security Blog

JANUARY 21, 2021

There will be spoilers ahead, both for the year to come and for the cyberpunk cult classic. In fact, it’s very common to deploy Duo and find people are using many more personal devices than expected. Dropping Passwords In the actual year 2021, we do have some recognition-based authentication. I admit it.

Cybersecurity 51

Cybersecurity Healthcare Authentication Internet 51

Duo's Security Blog

JANUARY 8, 2021

Yet, some of what we were looking for did come to pass. Setting that aside for the moment, a significant number of organizations deployed strong authentication , adaptive and risk-based access , endpoint device health , and brought these tactics together to secure people working in ways we never imagined back in 2019. Well, it was.

Digital transformation 52

Digital transformation Phishing Authentication DDOS 52

Duo's Security Blog

MAY 15, 2024

In the world of access management, we have seen wide deployment of multi-factor authentication (MFA) at the point of the Operating System (OS) to invoke the layer of something you know (i.e., Passwordless for Windows Logon is compatible with Duo Passport , a new capability that we announced at RSAC 2024. a registered device).

Authentication 94

Authentication Social Engineering Passwords Engineering 94

Cisco Security

JANUARY 10, 2023

One aspect that has come to the fore this year is the CISO’s position as ‘guardian of customers’ private data’ in the event of a breach, and their responsibilities over the level of disclosure they later provide. Many of them still ring true now and will continue to do so, but some new concerns have risen up the agenda.

CISO 138

CISO Insurance Cyber Insurance Phishing 138

Duo's Security Blog

MAY 2, 2024

We are excited to have partnered closely with Microsoft in the co-development of Microsoft Entra ID External Authentication Methods, available in Public Preview May 2024! External Authentication Methods (EAM) enables frictionless integration of Duo’s full security feature set.

Authentication 126

Authentication Phishing Passwords Risk 126

Cisco Security

MAY 12, 2021

Passwordless has arrived. The key components enabling the new authentication technology are all in place. Yes, with these puzzle pieces coming together, passwordless authentication looks more promising with each passing month. Therefore, it’s no wonder there’s so much excitement around the promise of passwordless.

Authentication 91

Authentication Passwords Marketing Technology 91

Duo's Security Blog

OCTOBER 6, 2023

Threat actors have dramatically escalated their attacks – targeting security controls like multi-factor authentication (MFA), conducting wily social engineering attacks and extorting businesses large and small with ransomware. Duo became the link we needed to make our security philosophy really work. What does that journey look like?

Authentication 135

Authentication Risk Social Engineering InfoSec 135

Duo's Security Blog

JANUARY 11, 2024

Secure Cisco VPN logins in less than an hour Authenticate users in seconds Verify user + device posture Blog unmanaged devices Mitigate modern security threats with phishing-resistant authentication Join the thousands of Cisco firewall customers who take advantage of protecting Cisco VPN logins with Cisco Duo Single Sign-On via SAML 2.0

VPN 88

VPN Authentication Firewall Risk 88

Duo's Security Blog

FEBRUARY 24, 2023

Our documentary, “ The Life and Death of Passwords ,” explores with industry experts the history of passwords, why passwords have become less effective over time, and how trust is established in a passwordless future. So to be able to enter a room, knowing the passphrase to enter that.

Passwords 92

Passwords Authentication Technology Marketing 92

Duo's Security Blog

JUNE 15, 2023

Third party security risk is an issue that frequently comes up in my discussions with clients. These include who typically accesses which applications from which devices at what times from what locations using which authentication methods. How do I enable secure access for a third party if I want them to maintain a particular asset?”

Risk 144

Risk Authentication Phishing Insurance 144

Duo's Security Blog

DECEMBER 12, 2023

In this blog, see the depth of Duo integrations with various AWS applications and services, and learn how you can better equip your organization with security that frustrates the attackers and not the users. With Duo, this can be achieved while prioritizing user productivity and scalability, all while minimizing security risks.

Data breaches 87

Data breaches Authentication Passwords Risk 87

Duo's Security Blog

DECEMBER 7, 2021

Passwordless is a sea change in authentication. Passwordless authentication provides the rare opportunity to increase our access security drastically while simultaneously improving the user experience — a compelling prospect! Users can also enroll multiple passwordless authenticators.

Authentication 97

Authentication Technology VPN Mobile 97

Duo's Security Blog

SEPTEMBER 4, 2023

And when it comes to managing access for this plethora of devices, password security just isn’t cutting it anymore. That’s where passkeys come in. Passkey private keys are typically protected by a hardware secure module, like iOS’ Secure Enclave, and must be present on the device to authenticate.

Passwords 63

Passwords Authentication Accountability Password Management 63

Duo's Security Blog

OCTOBER 11, 2023

Whether you’re facing credential theft, MFA bypass attacks or weak third-party security, Duo gives you the power you need to stop attackers in their tracks. How to defend against credential theft and credential stuffing with SSO When it comes to credential theft, the threat is real. Yes, that’s billion with a b. But much like Ms.

Authentication 107

Authentication Risk Technology Phishing 107

Duo's Security Blog

JULY 29, 2021

Part of our Administrator's Guide to Passwordless blog series See the video at the blog post. If you’re considering passwordless authentication for your organization today, you’ve probably been thinking for a while about a holistic authentication strategy. Detect anomalous user behavior and flag it for remediation.

Authentication 53

Authentication Passwords Accountability Manufacturing 53

Duo's Security Blog

JULY 1, 2021

Part of our Administrator's Guide to Passwordless blog series See the video at the blog post. The most critical difference is the context in which it is used for authentication in WebAuthn. The only way to unlock the credential is for the user to locally, often physically, interact with the authenticator device and enter the PIN.

Passwords 92

Passwords Surveillance Authentication Risk 92

Duo's Security Blog

AUGUST 15, 2023

At any given point in time, the Duo Care teams are having conversations with customers that span the spectrum of security topics. We love being able to work with organizations who are just getting started with Duo, as well as work with organizations who are looking to build more comprehensive protection on top of an initial MFA deployment.

Engineering 52

Engineering Social Engineering Accountability Authentication 52