Duo's Security Blog

DECEMBER 12, 2022

The Retail & Hospitality Information Sharing and Analysis Center (RH-ISAC) just released the 2022 Holiday Season Cyber Threat Trends report that reveals the most prevalent malware tools leveraged by cyber criminals this year, with phishing and fraud dominating the list.

Retail 83

Retail Cyber threats Social Engineering Phishing 83

Duo's Security Blog

MARCH 4, 2024

MFA is a common second line of defense against compromised passwords. Even if an attacker has access to a username and password, they still need access to the second authentication factor to break into the organization. the password) from the login process and instead uses “something you are” (e.g., a device).

Authentication 79

Authentication Social Engineering Passwords Risk 79

Duo's Security Blog

APRIL 8, 2024

It is a well-known and established point that a password alone is not enough to secure an account. This is when a bad actor gains access to a user’s account through compromised credentials and push bombing or phishing a one-time passcode to get past the MFA requirement. That’s where multi-factor authentication (MFA) comes in.

Authentication 115

Authentication Accountability Risk Phishing 115

Security Boulevard

FEBRUARY 1, 2024

Despite solid cybersecurity defenses within her enterprise, the reliance on age-old passwords left it vulnerable. They struggled to create and remember complex, ever-changing passwords for the maze of systems they accessed daily. But while passwords have served their purpose, they have outlived their usefulness.

Authentication 64

Authentication Passwords CISO Password Management 64

Duo's Security Blog

JULY 6, 2023

The writing is certainly on the wall that username and password credentials are a menace to secure environments, and moving to strong authentication is the solution. There’s no time like the present for starting your passwordless journey Weak authentication with passwords and phishable MFA is putting enterprises at risk.

Authentication 64

Authentication Passwords Risk Technology 64

Duo's Security Blog

FEBRUARY 13, 2023

And for more information on protecting against ransomware, be sure to check out our ebook: Protecting Against Ransomware: Zero Trust Security for a Modern Workforce. What is ransomware? This gives your workers flexible MFA options.

Ransomware 93

Ransomware Insurance Authentication Passwords 93

Hacker's King

MAY 14, 2023

These tools could be anything from network scanning tools to password-cracking software. Sell your own ebook/Course If you have expertise in a particular area of cybersecurity, you can create and sell your own ebook or course. You can sell your ebook or course on platforms like Amazon Kindle, Udemy, or your own website.

Cybersecurity 40

Cybersecurity Cyber Attacks Marketing Hacking 40

Malwarebytes

JANUARY 25, 2021

Source: Brave website) Sharing an eBook with your Kindle could have let hackers hijack your account. Source: The Hacker News) Attackers behind a phishing campaign exposed the credentials they had stolen to the public Internet, across dozens of drop-zone servers. Other cybersecurity news.

IoT 63

IoT Internet Internet Education 63

Security Affairs

MAY 6, 2023

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Data breaches 93

Data breaches Malware Mobile Spyware 93

CyberSecurity Insiders

APRIL 4, 2023

Chinese fraudsters primarily target the United States for two reasons: the large population makes phishing attacks more effective, and credit card limits in the country are higher compared to other nations. The latter method involves using the server and templates included in the phishing kit to impersonate various companies and brands.

Phishing 67

Phishing Social Engineering Authentication eCommerce 67

Security Boulevard

MAY 10, 2022

Human identities are being phished…. This explains the rise in phishing attacks targeting users. According to Help Net Security , the Anti-Phishing Working Group (APWG) detected 260,642 phishing attacks in July 2021. The issue is that users can’t always spot a phishing attempt. brooke.crothers. UTM Medium.

Risk 52

Risk Phishing Digital transformation Social Engineering 52

Duo's Security Blog

JUNE 27, 2023

Compromised credentials and phishing attacks, our previous two points of focus in the series, are two of the most common entry paths to ransomware deployment. When users get phished, bad guys start attempting to use the stolen credentials within 10 minutes. In the final instalment of this series, we cover the rise of ransomware 3.0

Ransomware 79

Ransomware Healthcare Phishing Authentication 79

Duo's Security Blog

AUGUST 16, 2021

“There are primarily three ways you can authenticate someone: with their username and password, with two-factor authentication, and with a company-supplied device that you can trace. For most stuff, you should have two of those things. For critical things, you should have all three.”.

Authentication 98

Authentication Data breaches Encryption Retail 98

Vipre

OCTOBER 25, 2021

Email is the #1 attack vector for SMBs, and serves as a primary starting point for malware, phishing, and other types of attacks. . Do they know how to spot a phishing email or other types of hacking attempts? For our full step-by-step guide to improving your SMB’s security, download our free ebook here. Let’s break them down.

Cybersecurity 59

Cybersecurity Small Business Data breaches Phishing 59

Security Boulevard

JUNE 21, 2021

Ransomware code propagated through phishing and malware attacks that target weak workforce, supplier, and partner access credentials is perhaps the most common type of attack. The 2021 ForgeRock Consumer Identity Breach Report shows that breaches involving usernames and passwords increased by a staggering 450% in 2020.

Manufacturing 59

Manufacturing IoT CISO Authentication 59

Malwarebytes

AUGUST 9, 2022

. “We place our trust in applications to perform only the functions we intended, Operating Systems to perform functions we authorized, and that our credentials (user ID/password) are used only by authorized personnel. Stolen credentials, phishing attacks, zero-day applications, and OS vulnerabilities exploit our trust in endpoints.

Ransomware 67

Ransomware Malware Engineering Phishing 67