NopSec

FEBRUARY 28, 2024

Finally, we cover a Microsoft Exchange privilege escalation vulnerability that could enable motivated threat actors to steal your NTLM password hash. The research endeavored to edit the grub boot loader to force a shell to boot, but the grub password was password protected. CVE-2024-22107 (RCE) High Low 7.2

Authentication 59

Authentication Accountability Passwords Risk 59

Duo's Security Blog

SEPTEMBER 4, 2023

And when it comes to managing access for this plethora of devices, password security just isn’t cutting it anymore. In our recent passkey blog series , we’ve been unpacking the difference between new passkey technology and more conventional password security in light of some of the most critical authentication scenarios.

Passwords 72

Passwords Authentication Accountability Password Management 72

Duo's Security Blog

APRIL 20, 2023

In many rnodern phishing attacks, malicious links send employees to copies of otherwise farniliar websites—like an internal payroll portal login page where it’s quick to muscle-rnemory a username and password. Strong security practices layer to protect against phishing attacks. Additional IT service headcount ended up being unnecessary.

Phishing 62

Phishing Social Engineering Authentication Engineering 62

NopSec

FEBRUARY 15, 2017

Attackers can then determine the IP range of their victim’s domains, WHOIS records which sometimes contain information on the technical contacts in the company, or subdomains that may contain the victim’s webmail portal, VPN login page, or a company’s Intranet. The education sector, for instance, has seen its fair share.

Phishing 40

Phishing Social Engineering Engineering Healthcare 40

Duo's Security Blog

MAY 6, 2024

The security industry has diligently battled compromised credentials, evolving from passwords to multifactor authentication (MFA) to passwordless — our most secure and phishing-resistant method to date — and one that is fully supported in Duo. Despite these advancements, we still see many identity-based breaches year over year.

Authentication 93

Authentication Accountability VPN Phishing 93

Duo's Security Blog

OCTOBER 6, 2023

TL,DR: Check out our on-demand webinar Your Zero Trust Roadmap , where we outline the five key steps to secure user access to apps. For more information, check out our on-demand webinar Your Zero Trust Roadmap. So how does one go from MFA to full zero trust maturity? What does that journey look like?

Authentication 108

Authentication Risk Social Engineering InfoSec 108

Duo's Security Blog

MARCH 9, 2022

Firewall status, drive encryption status, password status and whether an antivirus or anti-malware agent is running can all contribute to improved security resilience. Adding multi-factor authentication to your virtual private network (VPN) can increase protection against credential theft.

Cybersecurity 62

Cybersecurity Authentication Passwords VPN 62