Duo's Security Blog

FEBRUARY 6, 2024

Traditionally, credentials (such as usernames, passwords or security tokens) have been the gatekeepers of access. However, over the past 18 months, there has been an unprecedented wave of identity-based cyberattacks with devastating consequences. Each user’s identity is a potential door into an organization’s environment. Stay tuned!

Accountability 75

Accountability Authentication Risk Marketing 75

Duo's Security Blog

SEPTEMBER 1, 2023

"Based on FIDO standards, passkeys are a replacement for passwords that provide faster, easier, and more secure sign-ins to websites and apps across a user’s devices. Unlike passwords, passkeys are always strong and phishing resistant. The FIDO Alliance asserts that passkeys are a replacement for passwords.

Passwords 97

Passwords Authentication Insurance Cyber Insurance 97

Duo's Security Blog

SEPTEMBER 4, 2023

And when it comes to managing access for this plethora of devices, password security just isn’t cutting it anymore. In our recent passkey blog series , we’ve been unpacking the difference between new passkey technology and more conventional password security in light of some of the most critical authentication scenarios.

Passwords 72

Passwords Authentication Accountability Password Management 72

Security Boulevard

AUGUST 26, 2021

The primary reason is cybercriminals’ use of new and emerging technologies, such as artificial intelligence (AI) and machine learning (ML). . Role-based access control (RBAC) is a model for determining appropriate access to applications, systems, infrastructure, and other corporate technology assets. What Is RBAC?

Data breaches 57

Data breaches Artificial Intelligence Retail Architecture 57

Thales Cloud Protection & Licensing

JULY 20, 2023

Protecting Against Smart Device Break-Ins This story also demonstrates the sobering reality that we can no longer solely rely on Usernames/Passwords to protect our networks. Originally known as CHIP (Connected Home Over IP), Matter is a unifying, IP-based protocol built on proven technologies ensuring inter-device connectivity.

Manufacturing 48

Manufacturing Computers and Electronics IoT Authentication 48

BH Consulting

AUGUST 9, 2022

The ongoing campaign has targeted more than 10,000 Office 365 organisations since September 2021, using ‘adversary in the middle’ (AiTM) sites to steal passwords and hijack login sessions. UCD joins Technological University Dublin which also runs a Masters in Applied Cyber Security. Microsoft’s extensive blog has more details.

Cybercrime 52

Cybercrime Accountability Phishing Authentication 52

Duo's Security Blog

APRIL 20, 2023

In many rnodern phishing attacks, malicious links send employees to copies of otherwise farniliar websites—like an internal payroll portal login page where it’s quick to muscle-rnemory a username and password. Moreover, they were incredibly complex to integrate with the University’s technology stack.

Phishing 64

Phishing Social Engineering Authentication Engineering 64

The Last Watchdog

JANUARY 30, 2019

Turn the corner into 2019 and we find Citigroup, CapitalOne, Wells Fargo and HSBC Life Insurance among a host of firms hitting the crisis button after their customers’ records turned up on a database of some 24 million financial and banking documents found parked on an Internet-accessible server — without so much as password protection.

Cyber Risk 147

Cyber Risk Risk Financial Services Banking 147

Cisco Security

AUGUST 26, 2021

With the addition of Kenna Security into our program we now have over 250 technology partners and over 400 integrations for our mutual customers to utilize. An integration with Cigent Technology is now available for Secure Endpoint customers to integrate with. Kenna has a healthy 3rd Party ecosystem of technology partners.

Technology 114

Technology Firewall VPN Authentication 114

NopSec

FEBRUARY 15, 2017

In 2016, Tulane University confirmed that 10 employees were the target of a phishing attack that successfully tricked them into sharing their passwords to their payroll accounts. The passwords were then used to deposit future paychecks into the attacker’s account. The education sector, for instance, has seen its fair share.

Phishing 40

Phishing Social Engineering Engineering Healthcare 40

Cisco Security

NOVEMBER 2, 2022

. “Over the last few years, we have increased our password complexities and required 2FA wherever possible. With this approach, employees had more password lock outs, password fatigue, and forgetting their longer passwords due to password rotations. Phishing resistant passwordless authentication with FIDO2.

Authentication 110

Authentication Passwords Phishing Mobile 110

Security Boulevard

JULY 21, 2023

This is why it's critical to secure your user identities and passwords and the IAM services that manage them. It comprises technologies and best practices to protect against unauthorized access, account takeover, credential misuse, privilege escalation, and other malicious activities that target user accounts and credentials.

Threat Detection 98

Threat Detection Authentication Passwords Accountability 98

Cisco Security

FEBRUARY 14, 2022

Richard Archdeacon: I’m frequently asked about when we will no longer need passwords. We have all seen the most commonly breached passwords are ‘123456’ or the classic ‘password’. Is that because users think that password is secure? We see ‘password stuffing’ attacks happen all the time.

Passwords 99

Passwords Technology Government CISO 99

Duo's Security Blog

OCTOBER 6, 2023

TL,DR: Check out our on-demand webinar Your Zero Trust Roadmap , where we outline the five key steps to secure user access to apps. Shrink the attack surface by reducing password usage with passwordless SSO and make it faster and more convenient for users to get to the apps they need – whether SaaS-based or private.

Authentication 112

Authentication Risk Social Engineering InfoSec 112

NetSpi Executives

APRIL 27, 2024

Ransomware, a definition Ransomware is a set of malware technologies, hacking techniques, and social engineering tactics that cybercriminals use to cause harm, breach data, and render data unusable. terminal services, virtual private networks (VPNs), and remote desktops—often use weak passwords and do not require MFA.

Ransomware 52

Ransomware Cyber Insurance Backups Insurance 52

Duo's Security Blog

FEBRUARY 11, 2022

To help you make the most of this new offering, Duo Product Manager Chris Demundo and Product Marketing Manager Ted Kietzman recently hosted the webinar Ask Us Anything: Passwordless Tips & Tricks , answering passwordless questions crowdsourced from our Duo Community public forum. Why should I choose Duo for passwordless?

Authentication 74

Authentication Passwords Mobile Risk 74

Duo's Security Blog

JULY 6, 2023

Today we will discuss the survey makeup, review key results and explain why Duo’s Passwordless technology is well positioned to meet enterprise authentication needs highlighted in the study. Investment in strong authentication is growing Top 3 “Areas expected to benefit from an increase in authentication technologies over the next 12 months.”

Authentication 61

Authentication Passwords Risk Technology 61

Duo's Security Blog

NOVEMBER 6, 2023

Passwords that are easily detectable or reused often are vulnerable to phishing attacks. This lowers the number of passwords users must remember (or re-use, as is often the case). The problem with balancing many identities Conventional passwords create separate lines for each account. What is a credential stuffing attack?

Passwords 74

Passwords Authentication Risk Technology 74

CyberSecurity Insiders

MAY 19, 2023

It does this by requiring not only a set of credentials based on what you know, such as a password (which is susceptible to phishing), but a second credential type based on what you possess, like your phone, token, or smart card, or what you are, including biometrics such as a fingerprint.

Phishing 109

Phishing Authentication Passwords Social Engineering 109

The Last Watchdog

OCTOBER 18, 2021

With new technological advancements comes a need for heightened security measures. NCSAM launched in 2004, at a time where technology was nowhere near where it is today. It requires employees to log in to their multiple accounts using a handful of steps rather than just a username and password.

Cybersecurity 133

Cybersecurity Education Antivirus Firewall 133

Duo's Security Blog

OCTOBER 11, 2023

To learn more about how Duo’s access management trifecta empowers you to authenticate further and defend faster, be sure to tune into our webinar Authenticate Further, Defend Faster with Higher Security from Duo. When connected to an SSO solution, passwordless technology removes credentials from the login process altogether.

Authentication 95

Authentication Risk Technology Phishing 95

Jane Frankland

OCTOBER 17, 2023

In addition to technology, it also requires employee education, so your workforce understands the dangers and becomes an extension of your security department – effectively, a defence asset. Then there’s the promise of free content, software, and products; and using unsecured public wi-fi networks, or weak passwords.

Security Awareness 124

Security Awareness Education Cybersecurity Data breaches 124

Duo's Security Blog

OCTOBER 20, 2021

That’s why we’ve committed to making the transition as easy as possible from a world filled with passwords to one with far fewer “password123”s. However, headlines about passwordless typically read like this: “Company X Wants to Eliminate the Password” or “The Time for Passwordless Authentication Is Now.” The answer may surprise you.

Education 52

Education Authentication Passwords CISO 52

Duo's Security Blog

SEPTEMBER 30, 2022

If you are not sure what the new security requirements are or if they affect your business or organization, don’t worry – we put together a webinar to help answer those questions. Watch the FTC Safeguards Rule Webinar. The definition of financial institutions includes non-financial institutions.

Cybersecurity 60

Cybersecurity Authentication CISO Healthcare 60

Security Boulevard

MAY 5, 2021

The many types of ICS systems include a complex network of instrumentation and technology used in industrial production plants. Information Technology. They extracted the passwords to access the SCADA HMI and SCADA web interface to take control of the most critical systems. Webinar: Florida Water Utility Attack Demonstration.

Energy and Utilities 87

Energy and Utilities Manufacturing Data breaches Phishing 87

Thales Cloud Protection & Licensing

FEBRUARY 24, 2021

For the sake of brevity, passwords are not going to be examined, given the industry consent that nowadays passwords are more a vulnerability than an authentication mechanism. However, the National Institute of Standards and Technology (NIST) has published guidance that recommends against using SMS as the channel for OOB verification.

Authentication 87

Authentication Mobile Passwords Software 87

Thales Cloud Protection & Licensing

DECEMBER 2, 2021

The evolving business and technology landscape and the need for secure, yet convenient, ways of logging into applications are driving the quest for more effective authentication. Many businesses are still relying on single factor, insecure passwords, that are a source of increased risks. Thu, 12/02/2021 - 08:36. The changing landscape.

Authentication 125

Authentication Passwords Risk Mobile 125

Thales Cloud Protection & Licensing

OCTOBER 13, 2022

Since the majority of users re-use their passwords across apps, you can improve security and reduce calls to the helpdesk, by equipping users with FIDO2 authenticators. Finally, to understand how to comply with US Government Zero Trust Strategy thanks to Microsoft and Thales, look at this on demand webinar. Thanks to our X.509

Authentication 127

Authentication Phishing Digital transformation Government 127

Duo's Security Blog

JULY 29, 2021

Hopefully, you’ve already got this one — but if not, there are countless products that can help you mitigate the threats of password-based single-factor authentication. So long as passwords remain an option, adversaries can apply the same attacks they use today to password-based auth methods.

Authentication 54

Authentication Passwords Accountability Manufacturing 54

Security Boulevard

APRIL 12, 2022

81% of payer executives say their company is investing in technology to improve member experience. No more typing out usernames and thinking up passwords. Examples of self-service include managing login preferences and passwords, updating contact information, requesting specific support, and so on. Progressive Profiling.

Healthcare 52

Healthcare Authentication Passwords CISO 52

Security Boulevard

APRIL 8, 2021

Our team felt that to call ourselves a platform, we need to meet certain criteria: The components of the platform should all work off the same underlying technology. Our underlying technology. All of our platform components are built on top of our core technology? We believe that, in CORE, we do all these and more.

Education 52

Education Technology Passwords Accountability 52

Thales Cloud Protection & Licensing

SEPTEMBER 30, 2021

“If you look at the most major ransomware attacks that have occurred, basic cyber hygiene could have prevented the vast majority of them, so, killing their ability to move laterally,” Matthew Swenson, chief of the Department of Homeland Security’s (DHS) Cyber Crime Unit at Homeland Security Investigations (HSI), said during a recent webinar.

Ransomware 71

Ransomware Cybersecurity Healthcare Education 71

Duo's Security Blog

JANUARY 28, 2022

Imagine a shift away from logging into a “network” to having security seamlessly built into the network, and multi-factor authentication and authorization continuously performed at the application level on the fly — without users typing passwords.

Authentication 52

Authentication Government DNS Encryption 52

Cisco Security

AUGUST 26, 2022

Just like the myriad expanding galaxies seen in the latest images from the James Webb space telescope, the cybersecurity landscape consists of a growing number of security technology vendors, each with the goal of addressing the continually evolving threats faced by customers today. Read more here. Read more here. Read more here.

Firewall 121

Firewall Authentication Passwords Threat Detection 121

SecureList

APRIL 27, 2022

You can find the recording of the webinar here and a summary/Q&A here. In December we were made aware of a UEFI firmware-level compromise through logs from our firmware scanning technology. Contrary to reporting from other vendors, this wiper does not leverage the Isaac PRNG. Other interesting discoveries.

Malware 137

Malware Firmware Government Phishing 137

SecureWorld News

OCTOBER 14, 2021

These representations may be about a system security plan detailing the security controls it has in place, the company's practices for monitoring its systems for breaches, or password and access requirements. RESOURCE] Keep your team's professional development on track through SecureWorld's conferences , webinars , and online training.

Government 86

Government Cybersecurity Cyber Risk Risk 86

Security Affairs

MAY 8, 2020

Threat actors included the passwords for accessing the archives’ contents in the subject of the email, the name of the archive, or in their subsequent correspondence with the victim. bypass corporate security systems in H2 2019, cybercriminals continued to archive their malicious attachments.

Phishing 59

Phishing Spyware Banking Malware 59