Duo's Security Blog

MARCH 4, 2024

MFA is a common second line of defense against compromised passwords. Even if an attacker has access to a username and password, they still need access to the second authentication factor to break into the organization. the password) from the login process and instead uses “something you are” (e.g., a device).

Authentication 79

Authentication Social Engineering Passwords Phishing 79

Duo's Security Blog

APRIL 20, 2023

Accounting for nearly a quarter of reported incidents in Australia, phishing is a broad category of social engineering with several variations. These social engineering techniques tricked employees into revealing their login credentials, which allowed attackers to access additional systems and data. What is phishing?

Phishing 64

Phishing Social Engineering Authentication Engineering 64

CyberSecurity Insiders

APRIL 4, 2023

Additionally, NFTs and eBooks are also suitable for money laundering. They may use methods such as pretending to be the rightful owner (social engineering) and calling the card company's call center to confirm the limit, disabling the one-time password authentication required for card use, or using other social engineering tactics.

Phishing 67

Phishing Social Engineering Authentication eCommerce 67

The Last Watchdog

JUNE 21, 2023

The top-five data points from the survey include: •92% of respondents are concerned about compromised credentials because of phishing or social engineering attacks, which points to the recent rise and success of both these attack vectors. •59% and Canada were surveyed.

Authentication 140

Authentication Social Engineering Passwords Phishing 140

Duo's Security Blog

DECEMBER 12, 2022

And in our ebook, Retail Cybersecurity: The Journey to Zero Trust , we share ways that Duo can help retailers improve their security posture. Single sign-on (SSO) fortifies MFA by creating fewer passwords and a single dashboard for users to log into to reach all of their applications in one place.

Retail 78

Retail Cyber threats Social Engineering Phishing 78

Thales Cloud Protection & Licensing

MAY 6, 2021

As World Password Day comes around again this May 6 th , how much has changed in the year since we last marked the occasion? As such, this year’s World Password Day is in fact a timely reminder for businesses to drop passwords forever, and instead rollout access management solutions such as passwordless authentication.

Social Engineering 96

Social Engineering Authentication Passwords Technology 96

NetSpi Technical

NOVEMBER 2, 2023

These credentials can be brute forced through password sprays, found in online dumps, or obtained through social engineering. Find more stories like these in our Azure Pentesting eBook. The post Abusing Entra ID Misconfigurations to Bypass MFA appeared first on NetSPI.

Authentication 143

Authentication Accountability Social Engineering Penetration Testing 143