Duo's Security Blog

APRIL 23, 2025

New threat types such as push-bombing, social engineering, and spear phishing are forcing organizations to do more than rely on MFA alone. Duo Risk-Based Authentication takes baseline authentication behavior and evaluates contextual signals to dynamically adjust authentication requirements in real time. Attacks have evolved.

Authentication 59

Authentication Risk Social Engineering Accountability 59

Duo's Security Blog

NOVEMBER 20, 2023

Add to this, the risks of weak authentication factors such as SMS one-time passcodes and dormant or inactive accounts. On the proactive side, ITDR can detect policy misconfigurations, excessive privileges, and high-risk scenarios such as dormant or inactive accounts or accounts with MFA disabled.

Threat Detection 138

Threat Detection Authentication Accountability Data breaches 138

Duo's Security Blog

APRIL 20, 2023

Totaling up to billions of Australian Dollars at risk each year from hackers and various online scams, it's crucial that organisations (and individuals!) Accounting for nearly a quarter of reported incidents in Australia, phishing is a broad category of social engineering with several variations. What is phishing?

Phishing 106

Phishing Social Engineering Authentication Engineering 106

Security Boulevard

MARCH 19, 2021

Social engineering lures are a good example. Yet they are not without risk in terms of cybersecurity. With employees spread out in disparate locations during the pandemic, the increased need to share files upped the cybersecurity risk even more. Request a Demo. Additional Resources. Featured: .

Cybersecurity 119

Cybersecurity CISO Social Engineering Technology 119

CyberSecurity Insiders

APRIL 10, 2023

In the current digital landscape, identity security has gained paramount importance due to the growing cyber risks posed by phishing and social engineering attacks utilizing AI. Thus, a robust identity security framework is essential to safeguard against these risks and ensure the protection of personal information.

Identity Theft 105

Identity Theft Education Authentication Data breaches 105

eSecurity Planet

MAY 28, 2024

Cloud security issues refer to the threats, risks, and challenges in the cloud environment. Risks include potential damage from cyber threats and vulnerabilities. 4 Top Cloud Security Risks A cloud security risk is a combination of the possibility of a threat arising and the system’s vulnerability.

Risk 71

Risk Cloud Migration DDOS Encryption 71

eSecurity Planet

APRIL 22, 2022

For that reason, most experts now recognize that a complete cybersecurity strategy not only includes technological solutions aimed at preventing, detecting, and mitigating attacks, it should also include cyber insurance to help manage the associated financial risks. Also see: Best Third-Party Risk Management (TPRM) Tools.

Cyber Insurance 121

Cyber Insurance Insurance Marketing Small Business 121

SecureWorld News

OCTOBER 4, 2021

Still, little was reported about the details of the cyber incident, including who the attackers are, how the cyberattack happened, and the social engineering methods used to make the email look official. This provider covers issues related to public risk management. Peterborough has insurance through NH Primex.

Insurance 98

Insurance Ransomware Social Engineering Cybercrime 98

SecureWorld News

AUGUST 12, 2024

A : Educating employees about phishing, social engineering, and safe online practices helps prevent human errors that can lead to security breaches. I'm responsible for infrastructure security, vehicle security, and ensuring compliance with governance, risk, and compliance (GRC) standards to keep our systems safe and secure."

Cybersecurity 104

Cybersecurity Technology Government Mobile 104

SecureWorld News

OCTOBER 27, 2021

In today's connected environment, there are a large number of evolving cyber threats putting your organization at risk. The results of using the outlined approaches also improved participation and reduced risk, too. I can go into my [saved] folders, and find our folder on social engineering. Ransomware.

Cybersecurity 98

Cybersecurity Cybercrime Security Awareness Education 98

SecureWorld News

OCTOBER 19, 2021

The malicious campaigns Charming Kitten are unleashing on unsuspecting victims makes use of superior social engineering, such as creating dummy accounts on Gmail that look realistic enough to trick users into clicking through. Users were instructed to activate an invitation to a (fake) webinar by logging in.

Phishing 98

Phishing Authentication Social Engineering Government 98

Responsible Cyber

JULY 13, 2024

Recognize and avoid social engineering scams by educating yourself on common tactics. RiskImmune offers comprehensive risk management solutions that can further fortify your cryptocurrency security framework. These security risks evolve continually as the digital landscape changes.

Cryptocurrency 52

Cryptocurrency Cyber Attacks Social Engineering Scams 52

Security Boulevard

OCTOBER 4, 2024

Organizations must understand that employees inevitably will use generative AI, the report says, because of the productivity boost it offers; and that employees need guidance to understand the risks of using this technology. Have you ever shared sensitive work information without your employer’s knowledge? Source: “Oh, Behave!

Cybersecurity 69

Cybersecurity CISO Ransomware Technology 69

Webroot

FEBRUARY 11, 2021

As we mentioned in a previous blog , hackers come in many forms, but their methods can generally be classified into three distinct types of cybercriminals: The Impersonator – Hackers that pretend to be others, often using social engineering and human psychology to trick users. How Do Infiltrators Breach Systems?

Scams 119

Scams Phishing Firewall Social Engineering 119

Duo's Security Blog

DECEMBER 19, 2024

While we tend to associate phishing emails more with our personal accounts, attacks targeting our work identities whether through socially engineered phishing, brute force, or another form, are very common. An email containing a QR code constructed from Unicode characters (defanged) identified by Cisco Talos.

Phishing 64

Phishing Authentication Social Engineering Passwords 64

Identity IQ

MAY 17, 2023

The 2022 Trends in Identity Report indicates identity thieves are getting better at using social engineering techniques to convince people to share personal, financial, and important business information. For more information, email webinar@idiq.com. View the full 2022 Trends in Identity Report here.

Identity Theft 66

Identity Theft Scams Education Data breaches 66

Security Boulevard

APRIL 28, 2021

Networks can also be easily breached by social engineering, password theft, or tainted USBs, as in the Stuxnet attack. . . They were able to cause overheating, disruption, risk of permanent equipment damage and other problems. Webinar: Analysis of the Florida Water Utility Cyberattack . Additional Learning.

Energy and Utilities 72

Energy and Utilities Malware DDOS Internet 72

Webroot

FEBRUARY 5, 2025

Check out our recent webinar where we discuss passkeys How do passkeys work? Enhanced security No passwords mean no risk of phishing attacks, password leaks, or brute-force attacks. Reduced risk of social engineering Attackers cant trick users into revealing passkeys like they do with passwords.

Authentication 62

Authentication Password Management Passwords Backups 62

Chicago CyberSecurity Training

JULY 1, 2023

Be sure to avoid passphrases that may include information that can be easily gathered about you via social engineering. Contact us today for a free cybersecurity risk assessment tailored to your business needs. Phrases are easier to remember, hard to crack, and offer stronger protection for your online accounts.

Cybersecurity 40

Cybersecurity Backups Social Engineering Firmware 40

Hacker's King

OCTOBER 15, 2024

Cybersecurity encompasses many areas like risk management, compliance, security analysis, and incident response, where understanding the technical aspects of threats is key, but it doesn’t always involve writing code. There are numerous non-coding positions available, focusing on strategy, risk management, and incident response.

Cybersecurity 52

Cybersecurity Penetration Testing Risk Antivirus 52

SecureList

MAY 27, 2022

The attackers study their victims carefully and use the information they find to frame social engineering attacks. You can find the recording of the webinar here and a summary/Q&A here. When opened, this document eventually downloads a backdoor. zip”). Lazarus uses Trojanized DeFi app to deliver malware.

Phishing 133

Phishing Spyware Firmware Malware 133

LRQA Nettitude Labs

JULY 5, 2023

In addition to the topics below that you can expect to see reviewed and discussed in the forms of blog posts or webinars, LRQA Nettitude would also like to extend an open invitation for feedback and collaboration. Current Regulations Initial investigation shows the challenges that organisations will face in regulating the use of AI.

Artificial Intelligence 52

Artificial Intelligence Data privacy Social Engineering Risk 52

NetSpi Executives

APRIL 27, 2024

Ransomware, a definition Ransomware is a set of malware technologies, hacking techniques, and social engineering tactics that cybercriminals use to cause harm, breach data, and render data unusable. Ransomware attackers get into a network in many ways: Social engineering. Unpatched exploits. Monitor, monitor, monitor.

Ransomware 52

Ransomware Cyber Insurance Backups Insurance 52

Centraleyes

FEBRUARY 26, 2025

It serves as a warning to regularly backup company data and train every employee on how to identify phishing and social engineering attacks. Dharma ransomware first emerged in 2016 and uses a popular phishing strategy of impersonating Microsoft with email subjects such as Your System is At Risk.

Cybersecurity 52

Cybersecurity Banking Antivirus Education 52

NetSpi Executives

APRIL 27, 2024

A penetration testing service , also called a pentesting company , identifies vulnerabilities in IT systems that pose real-world risk to the client’s systems. Pentesters chain together seemingly low-risk events to verify which vulnerabilities enable unauthorized control.

Penetration Testing 52

Penetration Testing Social Engineering Software Wireless 52

Hacker's King

OCTOBER 16, 2024

These programs provide essential insights into ethical hacking, network security, and risk management. Follow industry blogs, join cybersecurity forums, and participate in webinars to stay ahead. You can enroll in various short-term diploma programs after completing your 12th, which typically lasts from 6 months to a year.

Cybersecurity 52

Cybersecurity Education Cyber Attacks Hacking 52

NopSec

JULY 25, 2017

Penetration Testing is the active exploitation of risk in applications, network devices, and systems. The on-demand webinar features a live demo of password self auditing. As it happens, the easiest way to actively exploit a system is to have the password or key. Click here to watch the demo.

Passwords 40

Passwords Penetration Testing Phishing Accountability 40

Digital Shadows

AUGUST 17, 2021

The social engineering aspect around phishing works because humans want to be helpful, informed, paid well, get stuff for free sometimes, and generally not end up on the wrong side of management. Unfortunately, aspects of really good social engineering prey on one or more of these human traits (or faults).

Phishing 52

Phishing Accountability Social Engineering Mobile 52

Webroot

OCTOBER 31, 2024

Steam the Webinar on demand HERE As we look back on the cybersecurity landscape of 2024, it’s clear that the world of digital threats continues to evolve at an alarming pace in parallel with AI. The saga of LockBit in 2024 exemplifies the resilience and adaptability of these cybercriminal groups.

Malware 117

Malware Ransomware Healthcare Passwords 117

Security Boulevard

JUNE 18, 2025

Podcast TechstrongTV - Twitch Library Related Sites Techstrong Group Cloud Native Now DevOps.com Security Boulevard Techstrong Research Techstrong TV Techstrong.tv authored by Marc Handelman. Korea IT Worker Scam Guardrails Breached: The New Reality of GenAI-Driven Attacks OAuth 2.0

Social Engineering 52

Social Engineering Data privacy Security Awareness Mobile 52

Jane Frankland

JANUARY 23, 2024

Countless studies have shown that women and men gauge risk differently. 1999) presented a meta-analysis of 150 psychology studies that showed that women are in some situations significantly more averse to risk than men. Research on Gender Differences in Risk Assessment: Why do Women Take Fewer Risks than Men?

Threat Detection 162

Threat Detection Risk Social Engineering Cybersecurity 162

Duo's Security Blog

MAY 23, 2023

The answer, like most other cybersecurity-adjacent answers, lies in a combination of factors including social engineering , weak passwords, and other risky security moves or attacks. Picking on someone…credential compromise in Australia It goes without saying that a lack of MFA puts your company or personal accounts at risk.

Authentication 144

Authentication Passwords Data breaches Phishing 144

Security Boulevard

JUNE 19, 2025

The Cybersecurity Risks of Smart Cities EU AI ACT MY TAKE: Microsoft takes ownership of AI risk — Google, Meta, Amazon, OpenAI look the other way Are Your Cloud Secrets Safe From Threats? authored by Marc Handelman. Moves to Collect $7.74 Million Tied to N.

Social Engineering 52

Social Engineering Data privacy Security Awareness Mobile 52

CyberSecurity Insiders

MAY 19, 2023

ATO is often initiated by credential theft and can be done using social engineering techniques (phishing attacks) or by bombarding login pages with bot-based attempts. Phishing attacks Phishing attacks attempt to steal personal data such as login credentials, credit card information, or even money using social engineering techniques.

Phishing 109

Phishing Authentication Passwords Social Engineering 109

McAfee

MARCH 5, 2021

Evolving Threats and Techniques – Staying ahead of the latest malware remains a priority, but many modern attacks are emerging that use techniques like social engineering to exploit the features of cloud providers and mimic user behavior with legitimate credentials. Live Webinar. Take the Fastest Route to SASE with MVISION UCE.

Digital transformation 102

Digital transformation Architecture VPN Technology 102

SecureList

APRIL 27, 2022

Such threats pose a risk to Ukrainian organizations and their partners, as well as foreign organizations with premises in Ukraine. You can find the recording of the webinar here and a summary/Q&A here. Contrary to reporting from other vendors, this wiper does not leverage the Isaac PRNG. Final thoughts.

Malware 145

Malware Firmware Government Phishing 145