Duo's Security Blog

FEBRUARY 29, 2024

To conclude this blog series, we’ll discuss each method in turn and why you may choose to adopt it. Verified Duo Push). Organizations that want the security benefits of code matching but with minimal friction can try a policy like Duo Risk Based Authentication in which codes are required only for suspicious authentications.

Authentication 124

Authentication Social Engineering Phishing Software 124

Duo's Security Blog

JANUARY 11, 2023

Last year, Duo announced the General Availability of Remote Desktop Protocol (RDP) for the Duo Network Gateway (DNG) , and today we are happy to share that we’ve now extended transmission control protocol (TCP) support to the Server Message Block (SMB) protocol. This capability is generally available for Duo Beyond customers.

VPN 94

VPN Firewall Authentication Internet 94

Duo's Security Blog

NOVEMBER 28, 2023

Security lockout in Duo Trust Monitor and unenrolled user lockout enable just that in the authentication security realm. Trust Monitor Lockout Duo Trust Monitor is a Duo threat detection feature focused on surfacing valuable and actionable security events to Duo administrators in the admin console.

Authentication 74

Authentication Accountability Threat Detection Risk 74

Duo's Security Blog

FEBRUARY 6, 2024

The 2024 Duo Trusted Access Report: Navigating Complexity , gives us a chance to use the topic of complexity as a backdrop to examine trends (existing and emerging) in both access management and identity. MFA usage continues to expand globally — The number of MFA authentications using Duo rose by 41% in the past year.

Authentication 66

Authentication Accountability Threat Detection Risk 66

Duo's Security Blog

NOVEMBER 16, 2023

This blog explores why endpoint security is of utmost importance when accessing applications and highlights the potential risks associated with compromised endpoints. If an access device is marked as compromised within the Cisco Secure Endpoint Dashboard, Duo can outright block the application access attempt.

Authentication 56

Authentication Architecture Risk Engineering 56

Duo's Security Blog

AUGUST 29, 2022

As cybersecurity leaders have been stepping up efforts to secure all users and applications with multi-factor authentication (MFA), Duo Security is highlighting security best practices that can help deter against malicious attacks. User Auditing Have your team create a user audit of unenrolled users in Duo and create a plan for enrollment.

Passwords 82

Passwords Authentication Education Internet 82

Duo's Security Blog

FEBRUARY 15, 2023

Duo Care sees our with customers as true partnerships where we work with organizations to develop an ongoing security strategy. In this post, we will break down the WHAT / HOW, the WHO, the WHERE / WHEN, and the WHY of executive business reviews. Why does Duo Care enable EBRs? What is an executive business review?

Engineering 52

Engineering Accountability Information Security CISO 52

Duo's Security Blog

OCTOBER 25, 2023

Why isn’t verifying user identity alone enough? Let’s look at why device security is a recommended best practice. Keep devices updated with Duo Attacks that exploit vulnerabilities in software can exact a heavy toll on any organization. But what about devices?

Software 97

Software Mobile Malware Risk 97

Schneier on Security

NOVEMBER 5, 2018

Troy Hunt has a good essay about why passwords are here to stay, despite all their security problems: This is why passwords aren't going anywhere in the foreseeable future and why [insert thing here] isn't going to kill them. Hacker News thread.

Passwords 208

Passwords Authentication Banking Media 208

Duo's Security Blog

JULY 21, 2021

As a Duo team member, and as part of the greater Cisco organization, I am one of more than 258 million monthly active subscribers of Microsoft 365. That’s why we’re happy to share that Duo now offers a Microsoft 365 application for Duo Single Sign-On (Duo SSO), allowing you to federate your Microsoft 365 domains with Duo SSO.

Authentication 95

Authentication Engineering 95

Duo's Security Blog

JANUARY 9, 2023

Fortunately, Duo makes implementing mobile security policies simple. In this post, we’ll talk about some impactful policies Duo Access and Beyond organizations can start enforcing today with minimal effort and high value to increase security posture.

Mobile 67

Mobile Encryption Authentication Data breaches 67

Duo's Security Blog

JULY 7, 2023

For many Duo Security administrators, logging into the Duo Admin Panel is part of your everyday work. It’s the strongest authentication method available today, which is why you see passkeys moving to replace passwords altogether. What is a passkey? See the video at the blog post.

Authentication 63

Authentication Passwords Mobile Password Management 63

Duo's Security Blog

AUGUST 30, 2022

When Engineering Manager Ian Beals joined Duo Security, he was eager to participate in the activities that make Duo culture unique. The Wiki contains the Duo Dictionary, which defines terms and acronyms specific to Duo as well as the broader cybersecurity space. See the video at the blog post.

Hacking 71

Hacking Engineering Cybersecurity 71

Duo's Security Blog

MARCH 30, 2023

It’s time to get started with your migration from Duo Traditional Prompt to Duo Universal Prompt. Why do we start our one-year countdown to the Duo Universal Prompt upgrade today? Why do we start our one-year countdown to the Duo Universal Prompt upgrade today? This redesigned version came out last year.

Authentication 54

Authentication Software Risk VPN 54

Duo's Security Blog

MAY 23, 2023

Cisco CISO Wolfgang Goerlich highlights the case for why passwords are kept around in The Life and Death of Passwords : “In an ideal world, we say goodbye to passwords altogether. Duo reported 13 billion authentications worldwide in 2022, an increase of 41% from the year past. Will we ever get rid of passwords completely?

Authentication 113

Authentication Passwords Data breaches Phishing 113

Security Affairs

JUNE 25, 2022

The security duo described the issue as a mega flaw that impacts all applications relying on ADF Faces, including Business Intelligence, Enterprise Manager, Identity Management, SOA Suite, WebCenter Portal, Application Testing Suite, and Transportation Management. The duo named their attack “The Miracle Exploit.”.

Hacking 79

Hacking Authentication Information Security 79

Duo's Security Blog

OCTOBER 18, 2022

Tune into our upcoming webinar, “ Don’t Bet on Passwords, Use MFA to Insure Your Protection ,” to hear from Wolfgang Goerlich, an advisory CISO at Cisco Secure Access by Duo, an Matt Brooks, a Duo Product Marketing specialist. Using Duo for MFA For years, Duo has been a cornerstone for MFA in the cybersecurity industry.

Insurance 56

Insurance Passwords Cyber Insurance Authentication 56

Duo's Security Blog

MARCH 22, 2021

To achieve certification Duo’s application was audited by AgID to verify whether the services provided comply with the requirements laid down in eIDAS (electronic identification and trust services) regulation and in national law and duly granted Duo qualified status. Why Is Agid Certification Important to Duo and Our Customers?

CISO 85

CISO Data privacy Security Performance Information Security 85

Duo's Security Blog

SEPTEMBER 16, 2021

At Duo, we're building a passwordless authentication solution that’s as easy to set up as it is to use – with our world-class security baked in. Read about why MFA and passwordless are a powerful pair. Try Duo for free using our 30-day trial and get used to being secure from anywhere at any time. Our experts have you covered.

Authentication 91

Authentication Passwords Phishing CISO 91

Duo's Security Blog

FEBRUARY 23, 2021

Hello, I am Helen Patton, and I am the newest Advisory CISO at Duo. This has nothing to do with why I’m choosing to come to Duo right now. This has nothing to do with why I’m choosing to come to Duo right now. While I was a CISO at Ohio State we partnered with Duo to implement MFA across our organization.

CISO 80

CISO Education Banking Retail 80

Security Affairs

JUNE 25, 2021

Threat actors are wiping many Western Digital (WD) My Book Live and My Book Live Duo NAS devices likely exploiting an old vulnerability. Owners of Western Digital (WD) claim that their My Book Live and My Book Live Duo network-attached storage (NAS) devices have been wiped. Please check yours and see what happened.”

Firmware 96

Firmware Internet Internet Hacking 96

Duo's Security Blog

NOVEMBER 3, 2022

Evaluating your authentication options Duo has always focused on providing a variety of authentication options for end users. This is why we provide a variety of other more flexible factors, including Verified Push , which is designed to increase the security of our most common authentication method, Duo Push.

Authentication 65

Authentication Mobile Passwords Risk 65

Duo's Security Blog

JULY 28, 2022

This article kicks off a series of posts produced by the Duo interns , highlighting their experiences and the projects they worked on this summer. It is not every day you find a Master of Fine Arts (MFA) in Creative Writing student majoring in poetry, interning at Duo – the most loved brand in security. But first, the big question.

Engineering 52

Engineering Internet Internet Mobile 52

Duo's Security Blog

JUNE 2, 2022

Duo Security and F5 have been long time partners and we share hundreds of joint customers. So, we’re excited to announce that customers can now easily deploy Duo with F5 BIG-AP Access Policy Management (APM) and take advantage of all the new Duo Universal Prompt goodness. Strategic Business Development Manager at F5, Inc.

Authentication 52

Authentication CISO Marketing Accountability 52

The Last Watchdog

SEPTEMBER 27, 2023

Related: Why ‘observability’ is rising to the fo re Cisco CEO Chuck Robbins has laid down a $28 billion bet that he’ll be able to overcome challenges Cisco is facing as its networking equipment business slows, beset by supply chain issues and reduced demand, post Covid 19.

Cybersecurity 214

Cybersecurity Marketing Backups Technology 214

Duo's Security Blog

AUGUST 18, 2022

This article is part of a series of posts produced by the Duo interns , highlighting their experiences and the projects they worked on this summer. Opening my offer letter for the Product Marketing Management (PMM) intern position at Duo Security, I was overjoyed and shocked. At Duo, I was tasked with a similar project.

Cybersecurity 52

Cybersecurity Marketing Manufacturing Media 52

Duo's Security Blog

JUNE 23, 2021

In early 2019, we embarked on a project to improve the Duo Mobile user authentication experience. It was a daunting task, considering we haven’t changed the Duo Mobile application in over seven years. These findings have been incorporated into the new Duo Push screen. Now I understand it’s actually there to protect my identity.”

Mobile 72

Mobile Accountability Authentication Education 72

Duo's Security Blog

AUGUST 12, 2021

According to Duo’s cloud data provider, our average mid-market customer manages 20 application integrations in their environment. That’s a key factor in why Gartner’s CARTA model emphasizes how important it is to “continuously discover, monitor, assess, and prioritize risk — proactively and reactively.”

Retail 88

Retail Healthcare Risk Authentication 88

Duo's Security Blog

NOVEMBER 16, 2021

Why You Need Single Sign-On (SSO) Today’s workforce leverages many applications. Simple, Secure Single Sign-on from Duo In 2015, Duo launched an on-premises SSO solution, Duo Access Gateway , used by thousands of organizations to enable secure access to on-premises and cloud-based applications.

Passwords 74

Passwords Authentication VPN Data breaches 74

Duo's Security Blog

MARCH 5, 2021

Welcome to our 5-part video series on getting started with Duo! Our founders Dug Song and Jon Oberheide believe that security should be elegant, seamless and easy for anyone to use which is why the Duo solution is powerful and simple at the same time. Learn how to get up and running quickly with Duo.

CISO 52

CISO Authentication Software Data breaches 52

Duo's Security Blog

JUNE 9, 2021

Follow the lives of three Duo designers as they work together to turn a user insight into a product update by sharing discoveries, embracing creativity, and making connections. Were it not for the green circle with “Duo” emblazoned on the front, you would have no idea it housed one of the nation’s top cybersecurity companies.

Engineering 97

Engineering Cybersecurity 97

Duo's Security Blog

NOVEMBER 10, 2020

The time has come where we analyze authentication data and produce our wildly popular Duo Trusted Access Report. The 2020 Duo Trusted Access Report details the security state of thousands of the world’s largest and fastest-growing organizations. This year’s report is our best yet! Let us know what you think.

Authentication 60

Authentication CISO VPN Technology 60

Duo's Security Blog

SEPTEMBER 7, 2022

You wouldn’t let someone into your home if they were sick, so why let these devices on your network without first checking their health? One tool that can help is the Duo Device Health Application. It’s part of a more extensive Duo Trusted Endpoints policy that also considers whether a device is managed or unmanaged.

Malware 54

Malware Firewall Data breaches Encryption 54

CSO Magazine

MARCH 31, 2021

“In response to how criminals have changed their attack methods, we have encrypted passwords with ever stronger algorithms, hashed and salted them,” says Wolfgang Goerlich, Advisory CISO, Duo Security at Cisco. In addition, many users often forget them, which is why password-reset requests are among the most common IT help desk tickets.

Passwords 78

Passwords CISO Encryption Technology 78

Duo's Security Blog

JULY 13, 2022

Part one in a three-part series on design thinking at Duo. At Duo Security, customers love us because our zero-trust security platform is easy, effective and user-focused. There’s no way that one person can solve for that, which is why collaboration and creativity is so important.” What is design thinking?

Accountability 96

Accountability Information Security Technology Engineering 96

Dark Reading

JULY 30, 2019

Duo Labs' Mikhail Davidow and Jeremy Erickson speak about their research on the Apple T2 security chip, and why they're sharing it at Black Hat USA.

62

62

Duo's Security Blog

OCTOBER 7, 2022

In this blog, we explain why it makes sense for these firms to work with managed service providers (MSPs) to help bolster their security posture and increase their chances of getting cyber liability insurance cover as insurers continue to raise the bar. What are the benefits of working with a Duo Managed Service Provider?

Small Business 71

Small Business Cyber Insurance Insurance Cyber Risk 71