Duo's Security Blog

SEPTEMBER 1, 2023

Unlike passwords, passkeys are always strong and phishing resistant. Passkeys based on Webauthn are proven to be resistant to phishing, credential stuffing, adversary-in-the-middle (AITM), server breaches and may other cyberattacks. If you are new to passkeys, you can get up to speed with our primer: What Are Passkeys?

Passwords 102

Passwords Authentication Insurance Cyber Insurance 102

Duo's Security Blog

OCTOBER 6, 2023

In other words, it’s not just about implementing MFA to verify user trust, it’s about using phishing-resistant MFA with risk-based authentication , device posture checks and other security controls. TL,DR: Check out our on-demand webinar Your Zero Trust Roadmap , where we outline the five key steps to secure user access to apps.

Authentication 117

Authentication Risk Social Engineering InfoSec 117

Cisco Security

AUGUST 26, 2021

With the addition of Kenna Security into our program we now have over 250 technology partners and over 400 integrations for our mutual customers to utilize. An integration with Cigent Technology is now available for Secure Endpoint customers to integrate with. Kenna has a healthy 3rd Party ecosystem of technology partners.

Technology 110

Technology Firewall VPN Authentication 110

SecureWorld News

SEPTEMBER 29, 2022

Bush and Congress in 2004 to help individuals protect themselves online as threats to technology and data privacy became more commonplace. For Amazon, cybersecurity is a top priority, said Jenny Brinkley, Director, Amazon Security, who was one of the webinar panelists. comment from webinar attendee). Updating software.

Cybersecurity 66

Cybersecurity Education Security Awareness Password Management 66

Security Affairs

MAY 8, 2020

Group-IB, a Singapore-based cybersecurity company, observed the growth of the lifespan of phishing attacks in the second half of 2019. Figure 1 The distribution of web-phishing among target categories . CERT-GIB’s findings indicate that phishing attack perpetrators have revised their so-called target pool. Target reshuffle.

Phishing 56

Phishing Spyware Banking Malware 56

Duo's Security Blog

NOVEMBER 6, 2023

Passwords that are easily detectable or reused often are vulnerable to phishing attacks. It’s also the foundation for a passwordless future, powering-up phishing resistance and user experience to defend against attackers. When connected to an SSO solution, passwordless technology removes credentials from the login process altogether.

Passwords 74

Passwords Authentication Risk Technology 74

Security Boulevard

MAY 5, 2021

The many types of ICS systems include a complex network of instrumentation and technology used in industrial production plants. Information Technology. Florida Water Attack Details - Tactics Included Phishing, Credential Stealing, DLL Injection. Webinar: Analysis of the Florida Water Utility Cyberattack.

Energy and Utilities 89

Energy and Utilities Manufacturing Data breaches Phishing 89

Duo's Security Blog

SEPTEMBER 16, 2021

Wolfgang Goerlich details in our white paper, Passwordless: The Future of Authentication , how pairing passwordless technology with strong MFA to protect access across cloud and on-prem is a practical way to provide the broadest security coverage today. No Phishing, Please See the video at the blog post. Advisory CISO J.

Authentication 99

Authentication Passwords Phishing CISO 99

SecureWorld News

OCTOBER 19, 2021

TAG reported that Iranian-government-backed actors, known as APT35 and by the aliases Rocket Kitten and Charming Kitten, are quickly picking up speed, especially when it comes to implementing slick phishing attacks. Developing advanced phishing techniques to lure victims. Rocket Kitten successfully attacks university website.

Phishing 75

Phishing Social Engineering Authentication Government 75

SecureList

MAY 27, 2022

In January, we reported a malicious campaign targeting companies that work with cryptocurrencies, smart contracts, decentralized finance and blockchain technology: the attackers are interested in fintech in general. You can find the recording of the webinar here and a summary/Q&A here. The phishing kit market. zip”).

Phishing 110

Phishing Spyware Firmware Malware 110

NopSec

FEBRUARY 15, 2017

Do you feel confident that everyone in your organization could identify a phishing email that contained ransomware? In today’s post, we share information with the goal that it will help everyone in your organization protect themselves from phishing attacks.

Phishing 40

Phishing Social Engineering Engineering Healthcare 40

Duo's Security Blog

JULY 6, 2023

Today we will discuss the survey makeup, review key results and explain why Duo’s Passwordless technology is well positioned to meet enterprise authentication needs highlighted in the study. Investment in strong authentication is growing Top 3 “Areas expected to benefit from an increase in authentication technologies over the next 12 months.”

Authentication 64

Authentication Passwords Risk Technology 64

Webroot

JUNE 2, 2022

This allows MSPs to offer the best combination of human expertise and a robust technology stack to help small businesses defend against future attacks. Ransomware, malware and phishing threats keep evolving. Tune into our latest webinar. Our MDR solution can help reduce the impact of successful attacks. Learn More.

Threat Detection 101

Threat Detection Cyber Insurance Small Business Insurance 101

Thales Cloud Protection & Licensing

APRIL 27, 2022

Next-generation cyberattacks are often summarized as ransomware, man-in-the-middle, brute-force, phishing, insider, or malware attacks. During a recent webinar , we discussed the potential impacts from a quantum-age cyberattack and the scenarios are chilling. Anatomy of a Quantum Attack. Thu, 04/28/2022 - 06:15. government.

Encryption 71

Encryption Government Data privacy Manufacturing 71

Webroot

FEBRUARY 11, 2021

Cybercriminals are masters at using technology and psychology to exploit basic human trust and compromise businesses of all sizes. While cybersecurity advice is often focused on technology like endpoint protection, firewalls and anti-virus, it’s important to remember that behind every breach is a human.

Scams 108

Scams Phishing Firewall Social Engineering 108

Cisco Security

MARCH 9, 2021

SecureX integration offers customers greater visibility to threats across technology silos. As technology has evolved, a gamut of new threats propagates through organizations via email. stops phishing, spoofing, business email compromise, malware, and other cyber threats. Learn more about Cisco Secure Email.

Technology 81

Technology Threat Detection Cyber threats Malware 81

Security Boulevard

APRIL 30, 2021

However, memory-based attacks typically use phished or insider credentials with escalated privileges or they use remote OS commands to execute such as PowerShell. But most endpoint technologies focus on end user devices, and less on core, high-value servers. Webinar: Defending Against Nation-State Attacks: Breaking the Kill Chain.

Firewall 105

Firewall Security Defenses Cyber Attacks Technology 105

Security Boulevard

JULY 21, 2023

It comprises technologies and best practices to protect against unauthorized access, account takeover, credential misuse, privilege escalation, and other malicious activities that target user accounts and credentials. Removing passwords will mitigate many password-based cyberattacks, such as phishing, brute-force, and credential stuffing.

Threat Detection 98

Threat Detection Authentication Passwords Accountability 98

Duo's Security Blog

FEBRUARY 6, 2024

we need the identity data…but we can’t just send the SOC an ocean of data without context…” — Duo Customer, Technology Sector Cisco customers have been asking for this type of intelligence, and we wanted to provide actionable identity insights without the noise. Stay tuned!

Accountability 77

Accountability Authentication Risk Marketing 77

Thales Cloud Protection & Licensing

MARCH 31, 2022

The EO requires US Federal Government organizations to take the necessary actions to strengthen and improve national cybersecurity by adopting “cloud first” technology with an Endpoint Detection and Risk (EDR) initiative to secure cloud services and implement a Zero Trust architecture. Now, Azure AD users can authenticate using X.509

Authentication 77

Authentication Government Cyber threats Phishing 77

Security Boulevard

MARCH 19, 2021

These detect phishing emails and remove threats from messages, documents and other files and disable any URLs before they even enter the network, a process known as content sanitization. In terms of technology, this means providing the best software tools to enable your remote workforce to collaborate securely. Increased File Sharing.

Cybersecurity 119

Cybersecurity CISO Social Engineering Technology 119

Security Boulevard

JULY 20, 2023

It also raises serious privacy concerns when facial recognition technology is involved, which undoubtedly led to the EU's recent ban. View our on-demand webinar, " Protect Your Customers Against Identity Fraud ," to learn about the use of AI to defend against AI-powered threats, or visit the Autonomous Access page. We should, too.

Artificial Intelligence 98

Artificial Intelligence Authentication Education Risk 98

Duo's Security Blog

SEPTEMBER 6, 2023

Be sure to tune into our webinar, The State of Passkeys in the Enterprise , on September 7th at 9am PST | 12pm EST. Passkeys on Cloud Platforms Passkeys have growing support from significant vendors. At times, we promote technology for a specific purpose, and it has a limited life. Want to learn more about passkeys in the enterprise?

Passwords 80

Passwords Password Management Authentication Threat Detection 80

McAfee

FEBRUARY 16, 2021

What is your organization ’ s readiness for the emerging eXtended Detection Response (XDR) technology ? McAfee just released the first iteration of this technology , MVISION XDR. Live Webinar. J oin us for a webinar on XDR readiness where experts will examine how to prepare to optimize XDR capabilities.

Technology 92

Technology Phishing Cybersecurity 92

Duo's Security Blog

MAY 23, 2023

In our previous two features, we covered the dangers of phishing (one method of credential compromise) and how to mitigate its impact on users. These habits highlight the need for more modern password technology and stronger authentication methods. Today, we cover best practices for an environment that has been compromised.

Authentication 117

Authentication Passwords Data breaches Phishing 117

Jane Frankland

OCTOBER 17, 2023

In addition to technology, it also requires employee education, so your workforce understands the dangers and becomes an extension of your security department – effectively, a defence asset. This includes using encryption, firewalls, and other security tools to protect your data from being intercepted or accessed by unauthorised individuals.

Security Awareness 124

Security Awareness Education Cybersecurity Data breaches 124

eSecurity Planet

MAY 28, 2024

Malware in Cloud Storage Buckets Malware threatens cloud storage buckets due to misconfigurations, infected data, and phishing. Potential effects include widespread event impact, high vendor dependence, which limits technological options, and regulatory compliance failures due to varying restrictions.

Risk 67

Risk Cloud Migration DDOS Encryption 67

Security Boulevard

FEBRUARY 8, 2023

Technology, risk management, and insurance are intertwining, but the challenge for insurers is that MSPs want zero risk. This amounts to an operational difficulty instead of a technological one, necessitating a consistent way to measure insurability. We hope this webinar provides insight on the cyber insurance market.

Cyber Insurance 52

Cyber Insurance Insurance Marketing Risk 52

eSecurity Planet

APRIL 22, 2022

Cyberattacks are not only a technological problem for companies, but they also represent a very real financial threat. Currently, cyber insurance is experiencing a ‘hard’ market, meaning that prices are increasing and there is less capacity available,” said Erik Barnes, Senior Underwriter, Cyber & Technology at AXA XL.

Cyber Insurance 117

Cyber Insurance Insurance Marketing Small Business 117

Approachable Cyber Threats

DECEMBER 10, 2020

When we say IT we mean any technology (hardware, software, or service) that supports the operations of your organization. Here you should consider strategy , assessments , and training : Network vulnerability assessments; Phishing simulations ; Technology evaluations; Education and training; and Policy creation and planning. “So

Cybersecurity 98

Cybersecurity Small Business Mobile Software 98

NetSpi Executives

APRIL 27, 2024

Ransomware, a definition Ransomware is a set of malware technologies, hacking techniques, and social engineering tactics that cybercriminals use to cause harm, breach data, and render data unusable. Attackers guess the passwords easily, find them in open source code repositories, or collect them via phishing.

Ransomware 52

Ransomware Cyber Insurance Backups Insurance 52

Security Boulevard

MARCH 17, 2021

Most important is the Adaptive Redaction technology within the Clearswift DLP. DLP policies are highly flexible and granular, and can easily extend to scanned documents and images, while the Clearswift DLP also protects data from phishing or ransomware attacks via its unique Structural Sanitization feature. Request a Demo. Featured: .

Data breaches 144

Data breaches Ransomware Financial Services CISO 144

BH Consulting

AUGUST 9, 2022

Researchers from Microsoft identified a phishing campaign that bypasses MFA. The programme’s admission page includes a link to the information webinar detailing the course, the team delivering it, entry criteria and research options. UCD joins Technological University Dublin which also runs a Masters in Applied Cyber Security.

Cybercrime 52

Cybercrime Accountability Phishing Authentication 52

Duo's Security Blog

JANUARY 28, 2022

This, in combination with network encryption, will lay a strong foundation against phishing and other common attack vectors. The move to a zero trust model allows for secure use of cloud, and OMB is requiring use of zero trust to facilitate the modernization of federal technologies. What’s in the Strategy?

Authentication 52

Authentication Government DNS Encryption 52

SiteLock

JANUARY 28, 2022

Cybercriminals were busy, too, causing ransomware to become more elaborate and costly, and phishing attacks to increase by 11% since the year prior. Next, conduct ample research into each vendor’s solutions and technology. 2021 also reminded us that bad actors can wreak havoc from anywhere in the world on important, global companies.

Firewall 105

Firewall Ransomware Education Cyber threats 105

Security Boulevard

AUGUST 26, 2021

The primary reason is cybercriminals’ use of new and emerging technologies, such as artificial intelligence (AI) and machine learning (ML). . Global organizations are being overrun by a flood of malware, phishing, and ransomware attacks and compromised credentials. What Is RBAC? Want to learn more about how to modernize RBAC?

Data breaches 59

Data breaches Artificial Intelligence Retail Architecture 59

Security Boulevard

APRIL 12, 2022

81% of payer executives say their company is investing in technology to improve member experience. Learn more by watching our on-demand webinar: Improving Healthcare Consumer Journeys for Experience and Security: How Modern Identity Helps Leaders from CDOs to CISOs Achieve Their Missions.

Healthcare 52

Healthcare Authentication Passwords CISO 52