Duo's Security Blog

NOVEMBER 14, 2023

However, the recent spate of software supply chain attacks has heightened awareness amongst security teams and IT on the risks of third parties and how quickly those risks can turn into incidents. In today’s blog, we’ll talk about how RBA and more secure methods of authentication can securely enable third-party access.

Authentication 68

Authentication Risk Mobile Technology 68

The Last Watchdog

NOVEMBER 28, 2023

Their top areas of concern include cybersecurity risk (58%), information security risk (53%) and compliance risk (39%). This demonstrates a lack of rigorous employee education and training on cybersecurity measures, making employees part of the problem rather than part of the solution. “IT

Cyber Risk 113

Cyber Risk Risk B2B Social Engineering 113

Duo's Security Blog

FEBRUARY 15, 2024

Multi-factor authentication (MFA) is a well-known and well-established protection that many organizations rely on. Several common authentication methods include the use of one-time passcodes (OTP). Passwordless authentication, which uses WebAuthn credentials, is another safe alternative to OTP.

Social Engineering 120

Social Engineering Authentication Passwords Engineering 120

Duo's Security Blog

OCTOBER 13, 2023

Multi-factor Authentication (MFA) protects your environment by guarding against password weaknesses with strong authentication methods. In our last blog, we discussed using strong passwords and a password manager to provide better defense at the first layer of the authentication process. What is MFA?

Authentication 115

Authentication Accountability Passwords Mobile 115

Thales Cloud Protection & Licensing

APRIL 10, 2024

Its heightened focus on flexibility and risk-based controls empowers organizations to tailor security measures more closely to their individual needs. A comprehensive understanding of your cardholder data environment (CDE) is crucial for later risk analysis and targeted control implementation. PCI DSS 4.0: is its flexibility.

Risk 71

Risk Encryption Firewall Cybersecurity 71

Security Boulevard

MARCH 8, 2024

Salt Security, focusing on API Posture Governance, provides an API risk management platform that seamlessly aligns with the updated NIST CSF guidelines. Govern” is also a critical piece of communication risk back to executives. What's Different in NIST CSF 2.0? Broader Inclusivity : CSF 2.0 Source: NIST Cybersecurity Framework (CSF) 2.0

Government 67

Government Cybersecurity Digital transformation Risk 67

eSecurity Planet

APRIL 12, 2024

Industry-specific rules: Check relevant regulations on a regular basis to verify data security compliance , and use DLP to protect sensitive data and reduce regulatory risks. Data storage: Identify whether your organization’s data storage is on-premises or cloud-based. Analyze the storage’s security protocols and scalability.

Backups 118

Backups Encryption Data breaches Risk 118

Thales Cloud Protection & Licensing

JUNE 15, 2023

Key Management as a Service (KMaaS) allows companies to manage encryption keys more effectively through a cloud-based solution instead of running the service on physical, on-premises hardware. A third-party service provider manages a KMaaS solution to alleviate the burden of cryptographic key management.

Encryption 133

Encryption Data breaches Authentication Risk 133

eSecurity Planet

DECEMBER 19, 2023

Understanding the risks, advantages, and best practices connected with IaaS security is becoming increasingly important as enterprises shift their infrastructure to the cloud. This danger emphasizes the significance of having strong authentication mechanisms and upgrading access controls on a regular basis.

Encryption 95

Encryption Firewall Authentication Software 95

Duo's Security Blog

FEBRUARY 6, 2024

However, over the past 18 months, there has been an unprecedented wave of identity-based cyberattacks with devastating consequences. According to Cisco Talos, three of the top five MITRE ATT@CK techniques used in 2023 were identity-based. It has been a foundational component in many approaches to zero trust.

Accountability 72

Accountability Authentication Risk Marketing 72

CSO Magazine

JULY 18, 2022

Stytch, a company founded to spread the adoption of passwordless authentication, has announced what it's calling a modern upgrade to passwords. The cloud-based solution addresses four common problems with passwords that create security risks and account friction. Enthusiasm, hesitancy for passwordless authentication.

Passwords 119

Passwords Authentication Accountability Risk 119

Duo's Security Blog

FEBRUARY 6, 2024

In partnership with the Cyentia Institute, Duo analyzed data from more than 16 billion authentications, spanning nearly 52 million different browsers, on 58 million endpoints and 21 million unique phones across regions including North America, Latin America, Europe, the Middle East, and Asia Pacific. Why should you care about identity sprawl?

Authentication 66

Authentication Accountability Threat Detection Risk 66

Duo's Security Blog

MAY 23, 2023

Passwords are a weak point in modern-day secure authentication practices, with Verizon highlighting that almost 50% of breaches start with compromised credentials. Until a fully password-free environment is deployed, accepted, and adopted by all users, less secure methods of authentication will still be relied on.

Authentication 113

Authentication Passwords Data breaches Phishing 113

Security Boulevard

FEBRUARY 18, 2024

Access Management and Identity Authentication Effective access management is crucial in a cloud environment to prevent unauthorised access to data and resources. These are the same risks that exist for on-premise IT infrastructure, but the controls and solutions are often different.

Encryption 127

Encryption Authentication Insurance Risk 127

Security Boulevard

APRIL 10, 2024

Its heightened focus on flexibility and risk-based controls empowers organizations to tailor security measures more closely to their individual needs. A comprehensive understanding of your cardholder data environment (CDE) is crucial for later risk analysis and targeted control implementation. PCI DSS 4.0: is its flexibility.

Risk 62

Risk Encryption Firewall Cybersecurity 62

Duo's Security Blog

NOVEMBER 27, 2023

Here are a couple of tools that can help you reduce your risk for some of Scattered Spider’s techniques: SIM Swaps Remove SMS and telephony authentication methods, limiting users to stronger factors like WebAuthn and Verified Duo Push. You can use these in both our standard MFA flow , as well as in our Passwordless offerings.

Authentication 75

Authentication Social Engineering Risk Accountability 75

Duo's Security Blog

JUNE 12, 2023

Before we can discuss passkeys, we need to lay some groundwork and discuss authentication, Passwordless and WebAuthn. What is authentication? Authentication is the process of verifying your online identity. We added multi-factor authentication (MFA) – something you know and something you have or are. What is passwordless?

Authentication 113

Authentication Passwords Password Management Phishing 113

eSecurity Planet

APRIL 19, 2023

Portnox Cloud offers network access control (NAC) as a cloud-hosted SaaS solution that enables rapid deployment of basic NAC capabilities. Although the capabilities are more limited than some NAC competitors, the quick deployment and reduced IT labor costs make Portnox Cloud an attractive solution for many. Who Is Portnox?

IoT 88

IoT Authentication VPN Backups 88

eSecurity Planet

JANUARY 18, 2024

It’s a scalable and cost-effective storage solution for businesses offered through a subscription service. When assessing the overall security of cloud storage and choosing a solution tailored to your business, it helps to determine its features, potential risks, security measures, and other considerations.

Risk 113

Risk Backups Encryption DDOS 113

Duo's Security Blog

JULY 21, 2023

Many organizations struggle with authentication processes that frustrate and burden users to the point that they see security as nothing but a point of friction. Here, we explore how Cisco Duo’s risk-based authentication can decrease false positives, accelerate frictionless trusted access, and help you assess risk at the point of login.

Authentication 63

Authentication Risk Engineering Phishing 63

eSecurity Planet

NOVEMBER 10, 2023

Domain Name System Security Extension (DNSSEC) protocols authenticate DNS traffic by adding support for cryptographically signed responses. Most commercial DNS security solutions incorporate DNSSEC as a fundamental offering to all customers. What Are DNS Security Extensions (DNSSEC)?

DNS 88

DNS DDOS Encryption Authentication 88

Malwarebytes

JANUARY 11, 2024

Ivanti Connect Secure is a widely used VPN solution that allows users to connect to their organization’s network. out of 10): an authentication bypass vulnerability in the web component of Ivanti Connect Secure (9.x, Cybersecurity risks should never spread beyond a headline. CVE-2024-21887 (CVSS score 9.1

VPN 97

VPN Authentication Software Risk 97

Duo's Security Blog

SEPTEMBER 1, 2023

And is it realistic to consider passkeys – and the passwordless solutions they support – as a valid alternative for traditional password security? We’ve been answering these questions in this blog series by unpacking the pros and cons of passkey technology from different authentication perspectives.

Passwords 58

Passwords Authentication Phishing Technology 58

Duo's Security Blog

JULY 15, 2021

Yes, it’s a password-less authentication method, greatly streamlining the login experience, and while that’s a great incentive to use passwordless for logging in, it’s not an improvement in authentication security in and of itself. Unlocking authenticator devices locally removes the threats of credential reuse and shared secrets.

Phishing 96

Phishing Authentication Passwords Risk 96

CSO Magazine

MAY 11, 2022

ForgeRock, a global identity and access management company, has introduced ForgeRock Autonomous Access, a new application that uses AI to prevent identity-based cyberattacks and fraud.

Authentication 106

Authentication Accountability Risk 106

Centraleyes

FEBRUARY 25, 2024

However, critical security risks and threats inherent in cloud environments come alongside the myriad benefits. This blog aims to dissect the nuances of cloud security risks , shedding light on the challenges commonly faced when securing digital assets in the cloud. Who’s Responsible for Security in the Cloud?

Risk 52

Risk Encryption Social Engineering Authentication 52

Thales Cloud Protection & Licensing

NOVEMBER 15, 2023

To manage the risk of potential insider and outsider threats while ensuring operational efficiency, airport authorities must accurately credential each employee in line with federal and airport-specific regulations; therefore, identity and access management play a crucial role. Integrate separate siloed systems to limit data sprawl.

Cybersecurity 87

Cybersecurity Authentication Digital transformation Cyber Insurance 87

Duo's Security Blog

NOVEMBER 17, 2022

As attackers have figured out ways to get around traditional multi-factor authentication (MFA), Duo has continued to evolve to prevent fraudulent access and protect the workforce. Making MFA More Secure Verified Duo Push strengthens MFA security by adding friction to the authentication process.

Authentication 65

Authentication Risk Phishing Engineering 65

Security Boulevard

FEBRUARY 23, 2023

Basic solutions like antivirus deployments are certainly still important, but they are reactionary measures. Some of the common forms these DNS-based attacks can take include: DNS spoofing: A malicious actor alters DNS records to redirect traffic to a fake website or server.

Antivirus 98

Antivirus DNS Threat Detection Small Business 98

eSecurity Planet

FEBRUARY 8, 2022

Single sign-on (SSO) is one of several authentication technologies aimed at streamlining and keeping login information and processes secure. It is often implemented along with multi-factor authentication (MFA) , wherein more than one factor of authentication is needed to authenticate the user. Increasingly.

Authentication 88

Authentication Passwords Risk Digital transformation 88

CyberSecurity Insiders

SEPTEMBER 9, 2021

However, managing on-premises and cloud-based systems can be challenging and can increase the enterprise’s attack surface. This is where cybersecurity based on protecting workforce identities become the key. Organizations have had no choice but to adapt and build on their existing cybersecurity systems. It isn’t all bad news, however.

Risk 121

Risk Authentication Marketing Accountability 121

Duo's Security Blog

OCTOBER 21, 2022

One of these threats that has gained attention includes circumventing an organization’s multi-factor authentication (MFA) protection. MFA fatigue, or when an attacker gets an authentic user to accept a request when that user is not trying to login, is one attack method that has made headlines. Are MFA fatigue attacks a good thing?

Authentication 59

Authentication Risk Passwords Phishing 59

Thales Cloud Protection & Licensing

JUNE 6, 2023

Organizations must adapt to the evolving risk and threat environment to protect their valuable and sensitive assets. Access security and authentication play an important role. How do we support expanding user authentication journeys while balancing strong security with a smooth user experience?

Authentication 62

Authentication Identity Theft Marketing Risk 62

Thales Cloud Protection & Licensing

APRIL 13, 2021

As businesses and organizations are migrating apps, services and data to the cloud, and as all enterprise users work remotely in a post pandemic world, it has become obvious that traditional, perimeter-based “castle and moat” style security strategies/controls are not adequate anymore. Identity & Access Management. Data security. Encryption.

Authentication 77

Authentication Digital transformation Data breaches Technology 77

CyberSecurity Insiders

APRIL 13, 2023

Some popular quantum-resistant cryptographic techniques include: Lattice-based cryptography: This approach relies on the hardness of mathematical problems related to lattices, which are multidimensional grids of points. Lattice-based cryptography is considered to be resistant to both classical and quantum attacks.

Cybersecurity 135

Cybersecurity Encryption Technology Authentication 135

Centraleyes

APRIL 23, 2024

The digital landscape is advancing, and the risks of shirking cutting-edge technology are substantial. It’s well known that while new technologies open up novel pathways, they also come with risks. According to a recent Deloitte report , more than half (52%) of consumers feel more at risk in the digital environment.

Risk 52

Risk Technology Artificial Intelligence Data privacy 52

CyberSecurity Insiders

APRIL 10, 2023

In the current digital landscape, identity security has gained paramount importance due to the growing cyber risks posed by phishing and social engineering attacks utilizing AI. Thus, a robust identity security framework is essential to safeguard against these risks and ensure the protection of personal information.

Identity Theft 105

Identity Theft Education Authentication Data breaches 105