Duo's Security Blog

SEPTEMBER 12, 2024

We have evolved from passwords to multi-factor authentication (MFA) to phishing-resistant passwordless — our most secure form of authentication to date. If you’re interested to learn more about how Duo and Microsoft can help secure your organization, check out this eBook that highlights how we work together to enable Zero Trust.

Authentication 143

Authentication Accountability Threat Detection Phishing 143

Duo's Security Blog

APRIL 8, 2024

It is a well-known and established point that a password alone is not enough to secure an account. This is when a bad actor gains access to a user’s account through compromised credentials and push bombing or phishing a one-time passcode to get past the MFA requirement. That’s where multi-factor authentication (MFA) comes in.

Authentication 143

Authentication Accountability Risk Phishing 143

Duo's Security Blog

MAY 10, 2023

With advanced language-based AI tools like ChatGPT growing increasingly accessible, the battle to prevent phishing attacks from impacting users is no longer answerable with just one security solution. Why is layered security essential against phishing? PCI DSS, HIPAA, etc.) PCI DSS, HIPAA, etc.)

Phishing 59

Phishing DNS Authentication Risk 59

Duo's Security Blog

FEBRUARY 13, 2023

And for more information on protecting against ransomware, be sure to check out our ebook: Protecting Against Ransomware: Zero Trust Security for a Modern Workforce. What is ransomware? This gives your workers flexible MFA options.

Ransomware 116

Ransomware Insurance Authentication Passwords 116

Duo's Security Blog

JULY 6, 2023

The writing is certainly on the wall that username and password credentials are a menace to secure environments, and moving to strong authentication is the solution. There’s no time like the present for starting your passwordless journey Weak authentication with passwords and phishable MFA is putting enterprises at risk.

Authentication 100

Authentication Passwords Risk Technology 100

Duo's Security Blog

OCTOBER 8, 2024

Reset and Secure Accounts: Force a password reset for all affected accounts and consider strengthening MFA requirements. Resetting passwords and adding stronger MFA can help prevent attackers from regaining access using stolen credentials. For example, if SMS was still allowed as an MFA factor, maybe move up to Verified Push.

Accountability 111

Accountability Passwords Social Engineering Education 111

Duo's Security Blog

MARCH 4, 2024

MFA is a common second line of defense against compromised passwords. Even if an attacker has access to a username and password, they still need access to the second authentication factor to break into the organization. the password) from the login process and instead uses “something you are” (e.g., a device).

Authentication 86

Authentication Social Engineering Passwords Phishing 86

Security Affairs

MAY 6, 2023

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Data breaches 98

Data breaches Malware Mobile Spyware 98

Duo's Security Blog

JUNE 27, 2023

Compromised credentials and phishing attacks, our previous two points of focus in the series, are two of the most common entry paths to ransomware deployment. When users get phished, bad guys start attempting to use the stolen credentials within 10 minutes. In the final instalment of this series, we cover the rise of ransomware 3.0

Ransomware 111

Ransomware Healthcare Phishing Authentication 111

Duo's Security Blog

SEPTEMBER 19, 2024

calling the help desk and asking for password and MFA resets) to gain initial access to environments. This allows them to perform privilege escalation and maintain access even when passwords are changed. Their techniques have been outlined in this helpful briefing from CISA.

Accountability 119

Accountability Risk Authentication Social Engineering 119

Duo's Security Blog

DECEMBER 16, 2024

This technique involves an attacker contacting the help desk, often with relevant context regarding a high-profile employee, and then demanding a password and MFA factor reset. They should understand that even though asking for a password reset or MFA reset might be a common ask it is always a big ask.

Authentication 52

Authentication Accountability Passwords Technology 52

Duo's Security Blog

AUGUST 16, 2021

“There are primarily three ways you can authenticate someone: with their username and password, with two-factor authentication, and with a company-supplied device that you can trace. For most stuff, you should have two of those things. For critical things, you should have all three.”.

Authentication 98

Authentication Data breaches Encryption Phishing 98

CyberSecurity Insiders

APRIL 4, 2023

Chinese fraudsters primarily target the United States for two reasons: the large population makes phishing attacks more effective, and credit card limits in the country are higher compared to other nations. The latter method involves using the server and templates included in the phishing kit to impersonate various companies and brands.

Phishing 67

Phishing Social Engineering Authentication eCommerce 67

Security Boulevard

FEBRUARY 1, 2024

Despite solid cybersecurity defenses within her enterprise, the reliance on age-old passwords left it vulnerable. They struggled to create and remember complex, ever-changing passwords for the maze of systems they accessed daily. But while passwords have served their purpose, they have outlived their usefulness.

Authentication 64

Authentication Passwords CISO Password Management 64

Security Boulevard

MAY 10, 2022

Human identities are being phished…. This explains the rise in phishing attacks targeting users. According to Help Net Security , the Anti-Phishing Working Group (APWG) detected 260,642 phishing attacks in July 2021. The issue is that users can’t always spot a phishing attempt. brooke.crothers. UTM Medium.

Risk 52

Risk Phishing Digital transformation Security Awareness 52

Vipre

OCTOBER 25, 2021

Email is the #1 attack vector for SMBs, and serves as a primary starting point for malware, phishing, and other types of attacks. . Do they know how to spot a phishing email or other types of hacking attempts? For our full step-by-step guide to improving your SMB’s security, download our free ebook here. Let’s break them down.

Cybersecurity 59

Cybersecurity Data breaches Small Business Phishing 59

Hacker's King

MAY 14, 2023

These tools could be anything from network scanning tools to password-cracking software. Sell your own ebook/Course If you have expertise in a particular area of cybersecurity, you can create and sell your own ebook or course. You can sell your ebook or course on platforms like Amazon Kindle, Udemy, or your own website.

Cybersecurity 40

Cybersecurity Cyber Attacks Marketing Hacking 40

Malwarebytes

AUGUST 9, 2022

. “We place our trust in applications to perform only the functions we intended, Operating Systems to perform functions we authorized, and that our credentials (user ID/password) are used only by authorized personnel. Stolen credentials, phishing attacks, zero-day applications, and OS vulnerabilities exploit our trust in endpoints.

Ransomware 77

Ransomware Malware Engineering Phishing 77

Security Boulevard

JUNE 21, 2021

Ransomware code propagated through phishing and malware attacks that target weak workforce, supplier, and partner access credentials is perhaps the most common type of attack. The 2021 ForgeRock Consumer Identity Breach Report shows that breaches involving usernames and passwords increased by a staggering 450% in 2020.

Manufacturing 45

Manufacturing IoT CISO Authentication 45

The Last Watchdog

JUNE 21, 2023

The purpose of the survey was to gain insight into the top authentication challenges, user experiences and attitudes with modern authentication, and to determine organizational desires to address authentication challenges with phishing-resistant passwordless authentication. and Canada were surveyed. and Canada were surveyed.

Authentication 140

Authentication Social Engineering Passwords Phishing 140

Malwarebytes

JANUARY 25, 2021

Source: Brave website) Sharing an eBook with your Kindle could have let hackers hijack your account. Source: The Hacker News) Attackers behind a phishing campaign exposed the credentials they had stolen to the public Internet, across dozens of drop-zone servers. Other cybersecurity news.

IoT 71

IoT Internet Internet Passwords 71