Duo's Security Blog

APRIL 8, 2024

This is when a bad actor gains access to a user’s account through compromised credentials and push bombing or phishing a one-time passcode to get past the MFA requirement. This type of attack is known as Account Manipulation: Device Registration.

Authentication 143

Authentication Accountability Risk Phishing 143

Security Boulevard

MAY 7, 2025

Phishing-Resistant MFA: Why FIDO is Essential madhav Thu, 05/08/2025 - 04:47 Phishing attacks are one of the most pervasive and insidious threats, with businesses facing increasingly sophisticated and convincing attacks that exploit human error.

Phishing 59

Phishing Authentication Passwords Social Engineering 59

Duo's Security Blog

SEPTEMBER 12, 2024

We have evolved from passwords to multi-factor authentication (MFA) to phishing-resistant passwordless — our most secure form of authentication to date. It combines Duo’s current authentication capabilities like MFA, Passwordless and SSO with powerful security insights into identity and device risk.

Authentication 143

Authentication Accountability Threat Detection Phishing 143

Duo's Security Blog

MAY 10, 2023

With advanced language-based AI tools like ChatGPT growing increasingly accessible, the battle to prevent phishing attacks from impacting users is no longer answerable with just one security solution. Why is layered security essential against phishing? PCI DSS, HIPAA, etc.)

Phishing 59

Phishing DNS Authentication Risk 59

Duo's Security Blog

JULY 6, 2023

The study also covered multi-factor authentication, identity protections, identity risks and identity vulnerabilities experienced. Study Findings We’ll focus on the workforce findings: 1. Get more insight into key survey takeaways by reading ESG’s ebook on the state of Passwordless in the Enterprise.

Authentication 100

Authentication Passwords Risk Technology 100

Cisco Security

JANUARY 10, 2023

As the majority of the global Covid fog finally started lifting in 2022, other events – and their associated risks – started to fill the headspace of C-level execs the world over. So, security will need to focus on supporting the introduction of flexibility and the ease of user experience, such as passwordless or risk-based authentication.

CISO 142

CISO Insurance Cyber Insurance Phishing 142

Duo's Security Blog

OCTOBER 8, 2024

As organizations continue to rely on digital identities for access control and authentication, the risk of identity compromise grows. They can pose significant risks to its operations, reputation, and stakeholders. This precaution helps mitigate the risk of undetected compromised accounts and enhances overall security.

Accountability 111

Accountability Passwords Social Engineering Education 111

Duo's Security Blog

SEPTEMBER 19, 2024

In this blog, we will explore the importance of securing identity admins, highlight the risks of poorly managed admin accounts and provide best practices to mitigate these risks. The risks of poorly managed administrator accounts Poorly managed identity administrator accounts can lead to significant security risks.

Accountability 119

Accountability Risk Authentication Social Engineering 119

Webroot

JANUARY 7, 2022

Earlier in 2021, we detailed the hidden costs of ransomware in our eBook. Last year, we forecasted phishing would continue to remain a prevailing method of attack , as unsuspecting individuals and businesses would fall victim to tailored assaults. Consumers also remain at risk. Ransomware. What to expect in 2022?

Cybercrime 116

Cybercrime Phishing Ransomware Cryptocurrency 116

Duo's Security Blog

JUNE 27, 2023

Compromised credentials and phishing attacks, our previous two points of focus in the series, are two of the most common entry paths to ransomware deployment. Implementing a model of secure access with solutions like Duo can help mitigate the risk of cyberattacks today and the Ransomware 4.0s of tomorrow.

Ransomware 111

Ransomware Healthcare Phishing Authentication 111

Webroot

FEBRUARY 10, 2022

Business owners and the MSPs that secure them can see how a set of factors are converging to increase the cybersecurity risks to businesses of all sizes. Educate end users – The next common method of compromise is phishing attacks, independent of company size. Download our eBook on the Hidden Cost of Ransomware.

Ransomware 126

Ransomware Small Business Backups Threat Reports 126

Duo's Security Blog

MARCH 4, 2024

In Duo’s new eBook Attack Vectors Decoded: Securing Organizations Against Identity-Based Threats , we summarize the top attack vectors targeting users and what organizations can do fortify their defenses. Some of the solutions are easy policy changes that organizations can turn on immediately, like Duo’s Risk-Based Authentication (RBA).

Authentication 86

Authentication Social Engineering Passwords Phishing 86

Webroot

FEBRUARY 11, 2021

Impersonators are known to use phishing , Business Email Compromise (BEC) and domain spoofing to lure victims, and they’re always looking for new ways to innovate. This is why a multi-layered approach that can block phishing sites (including HTTPS) in real time, is key for staying safe. How Do Infiltrators Breach Systems?

Scams 119

Scams Phishing Firewall Social Engineering 119

Duo's Security Blog

FEBRUARY 13, 2023

And for more information on protecting against ransomware, be sure to check out our ebook: Protecting Against Ransomware: Zero Trust Security for a Modern Workforce. What is ransomware? Want to try Duo for yourself? Sign up for a 30-day free trial !

Ransomware 116

Ransomware Insurance Authentication Passwords 116

Security Boulevard

MAY 10, 2022

Machine Identities, Human Identities, and the Risks They Pose. Human identities are being phished…. This explains the rise in phishing attacks targeting users. According to Help Net Security , the Anti-Phishing Working Group (APWG) detected 260,642 phishing attacks in July 2021. brooke.crothers. Related Posts.

Risk 52

Risk Phishing Security Awareness Digital transformation 52

Duo's Security Blog

AUGUST 16, 2021

—Alex Stamos, Former Chief Security Officer, Facebook, in WIRED magazine Adopt a Defense-in-Depth Strategy With Device Trust Identifying what devices are accessing corporate applications is critical to understanding the overall security posture of an organization and reducing the risk of unauthorized access.

Authentication 98

Authentication Data breaches Encryption Phishing 98

Thales Cloud Protection & Licensing

FEBRUARY 1, 2024

Outside her organization, cybercriminals exploited these shortcomings with increasingly sophisticated phishing attacks and relentless persistence. Passkeys are redefining user vulnerability Passwords are vulnerable to phishing attacks, demanding extra effort from users for good hygiene. Start with our eBook.

Authentication 138

Authentication Passwords CISO Password Management 138

CyberSecurity Insiders

APRIL 4, 2023

Chinese fraudsters primarily target the United States for two reasons: the large population makes phishing attacks more effective, and credit card limits in the country are higher compared to other nations. The latter method involves using the server and templates included in the phishing kit to impersonate various companies and brands.

Phishing 67

Phishing Social Engineering Authentication eCommerce 67

Duo's Security Blog

DECEMBER 16, 2024

The dissolution of the traditional security perimeter and the increase in identity-based attacks has come with its fair share of new risks for security practitioners to consider. The tool comes with dozens of alerts built to detect identity-based risk.

Authentication 52

Authentication Accountability Passwords Technology 52

Vipre

OCTOBER 25, 2021

Even prior to the pandemic, a 2019 survey revealed that only 14 percent of SMBs rated their ability to prevent and properly address cyber risks and vulnerabilities as useful. . There are a number of reasons that SMBs find themselves at risk for security breaches. What are the potential risks your company faces if there’s a breach?

Cybersecurity 59

Cybersecurity Data breaches Small Business Phishing 59

Security Boulevard

AUGUST 7, 2024

The National Security Agency (NSA) recently named it as one of the best defenses against evolving phishing attacks. No matter how a network breach occurs—whether through ransomware, phishing, or another cyberattack—the malicious software needs to “beacon out” to the attack’s infrastructure, also known as command-and-control (C2).

DNS 64

DNS Government Cyber threats IoT 64

Security Boulevard

JUNE 21, 2021

Ransomware code propagated through phishing and malware attacks that target weak workforce, supplier, and partner access credentials is perhaps the most common type of attack. This will reduce risks, costs, and time to value. . This has, in turn, extended the attack plane and created new opportunities for malicious actors.

Manufacturing 45

Manufacturing IoT CISO Authentication 45

Malwarebytes

AUGUST 9, 2022

Stolen credentials, phishing attacks, zero-day applications, and OS vulnerabilities exploit our trust in endpoints. A risk management strategy states that we cannot eliminate all system vulnerabilities or block all cyberattacks. Read our "A Defender's Guide to Ransomware Resilience" eBook! More resources.

Ransomware 78

Ransomware Malware Engineering Phishing 78

Security Boulevard

FEBRUARY 1, 2024

Outside her organization, cybercriminals exploited these shortcomings with increasingly sophisticated phishing attacks and relentless persistence. Passkeys are redefining user vulnerability Passwords are vulnerable to phishing attacks, demanding extra effort from users for good hygiene. Start with our eBook.

Authentication 64

Authentication Passwords CISO Password Management 64

Security Boulevard

AUGUST 16, 2022

eBook: Five Easy Steps to Replace Your SIEM. Zooming in on a phishing email affecting a workstation identifies email security misconfigurations. eBook: MITRE ATT&CK: Implementing a best practices framework for better detection and response. This very question highlights the importance of XDR. Pinpointing the right stuff.

Threat Detection 52

Threat Detection Security Defenses Cyber threats Marketing 52