Duo's Security Blog

NOVEMBER 15, 2024

Managing these diverse sets of users with multiple accounts can be challenging, especially if multiple identity stores and identity providers are involved. Traditionally, organizations have relied on strong authentication requirements, such as multi-factor authentication (MFA), to address compromised access.

Threat Detection 99

Threat Detection Cybersecurity Digital transformation Authentication 99

Security Boulevard

FEBRUARY 1, 2024

Passkeys and The Beginning of Stronger Authentication madhav Fri, 02/02/2024 - 05:23 How passkeys are rewriting the current threat landscape Lillian, an experienced CISO, surveyed the threat landscape. Lillian knew that a shift in authentication couldn't wait. FIDO is an overarching framework for secure and passwordless authentication.

Authentication 64

Authentication Passwords CISO Password Management 64

Duo's Security Blog

DECEMBER 12, 2022

And in our ebook, Retail Cybersecurity: The Journey to Zero Trust , we share ways that Duo can help retailers improve their security posture. Add a passwordless authentication factor like a biometric and block attempts at access. Get started by downloading our ebook, Retail Cybersecurity: The Journey to Zero Trust , today.

Retail 83

Retail Cyber threats Social Engineering Data breaches 83

Security Affairs

MAY 6, 2023

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Data breaches 98

Data breaches Malware Mobile Spyware 98

Duo's Security Blog

OCTOBER 8, 2024

As organizations continue to rely on digital identities for access control and authentication, the risk of identity compromise grows. Reset and Secure Accounts: Force a password reset for all affected accounts and consider strengthening MFA requirements.

Passwords 98

Passwords Accountability Education Social Engineering 98

Duo's Security Blog

JULY 6, 2023

Today we will discuss the survey makeup, review key results and explain why Duo’s Passwordless technology is well positioned to meet enterprise authentication needs highlighted in the study. Multiple account or credential compromise is the norm This result is surprising, but it’s not entirely new. Duo does not subscribe to that choice.

Authentication 62

Authentication Passwords Risk Technology 62

Security Boulevard

MAY 9, 2022

Of course, more standard mitigations also apply, like the ones detailed in the FBI briefing : Review domain controllers, servers, workstations, and active directories for new or unrecognized user accounts. Use multifactor authentication where possible. eBook: The Definitive Guide to AI and Automation Powered Detection and Response.

Ransomware 98

Ransomware Antivirus Passwords Backups 98

Security Boulevard

MARCH 15, 2022

It was the Expresso Twitter account that the hackers used to bait the organization to demonstrate their control over the company's IT infrastructure. Read our free eBook! "> Off. According to The Record , the largest media conglomerate in Portugal, Impresa, was a target of the Lapsus$ ransomware over the New Year holiday break.

Ransomware 128

Ransomware Telecommunications Firmware Media 128

Malwarebytes

AUGUST 31, 2022

After creating your child’s Apple ID, enable two-factor authentication (2FA) for that added layer of security, ensuring that your child’s account won’t get popped easily even if someone got hold of their password. Note that your child’s iCloud account is automatically created along with their Apple ID.

Accountability 98

Accountability Scams Risk Authentication 98

Duo's Security Blog

APRIL 20, 2023

Accounting for nearly a quarter of reported incidents in Australia, phishing is a broad category of social engineering with several variations. For one, solutions like Google Authenticator or Authy were far more confusing for the user during the enrollment process,” Stockdale said. What is phishing?

Phishing 67

Phishing Social Engineering Authentication Engineering 67

Duo's Security Blog

DECEMBER 16, 2024

If the help desk worker complies, the attacker will have gained initial access and will typically reset the account credentials, both password and MFA devices, to be under their control. Reducing help desk tickets Lets begin with the first component: reducing the number of help desk tickets associated with authentication.

Authentication 52

Authentication Passwords Accountability Technology 52

Security Boulevard

JUNE 16, 2022

Every aspect of human life is influenced and changed by software applications, which are a type of machine—from visiting the doctor, to purchasing online, to accessing bank accounts, to flying on an airplane. Also, like humans, machines must be authenticated to be trusted. TLS Machine Identity Management for Dummies - the FREE eBook!

Digital transformation 52

Digital transformation Authentication Banking Software 52

Duo's Security Blog

JUNE 27, 2023

Multi-factor authentication (MFA) is a critical component of their security program, but the solution that was packaged with the existing enterprise suite did not meet the requirements of the IT security team. Cyber attackers are increasingly targeting gaps in weaker multi-factor authentication implementations. In the last.

Ransomware 74

Ransomware Healthcare Phishing Authentication 74

Thales Cloud Protection & Licensing

MAY 6, 2021

As such, this year’s World Password Day is in fact a timely reminder for businesses to drop passwords forever, and instead rollout access management solutions such as passwordless authentication. The system needs to also take into account user trends and shifting requirements, rather than looking solely at least privilege access.

Social Engineering 96

Social Engineering Authentication Passwords Technology 96

Security Boulevard

JULY 19, 2022

Authenticate your K8s clusters with machine identities. The primary access point for a Kubernetes cluster is the Kubernetes API, therefore we need to authenticate and authorize both developers and services accessing the API. API authentication. API authentication covers both humans and clients accessing the API.

Authentication 52

Authentication Digital transformation Risk Engineering 52

Thales Cloud Protection & Licensing

APRIL 29, 2024

Digital Services Act (DSA) The DSA places greater responsibility and accountability on online platforms of all sizes. PSD3 sets out more extensive Strong Customer Authentication (SCA) regulations and stricter rules on access to payment systems and account information and introduces additional safeguards against fraud.

Risk 71

Risk Manufacturing Digital transformation Cyber threats 71

Thales Cloud Protection & Licensing

MARCH 31, 2021

There are two major considerations for us: enhanced authentication security, and user workflow efficiency. “In In the case of user efficiency, now with a full remote workflow for user authentication, all devices are authenticating over an enterprise VPN client. Justin Sherman, Tech Policy and Geopolitics Expert.

Digital transformation 77

Digital transformation VPN Technology Architecture 77

Security Boulevard

APRIL 29, 2024

Digital Services Act (DSA) The DSA places greater responsibility and accountability on online platforms of all sizes. PSD3 sets out more extensive Strong Customer Authentication (SCA) regulations and stricter rules on access to payment systems and account information and introduces additional safeguards against fraud.

Risk 72

Risk Manufacturing Digital transformation Cybersecurity 72

Security Boulevard

OCTOBER 2, 2023

Download: How to Stop Phishing Attacks with Protective DNS An Evolving Threat Requires Adaptive Defenses While phishing methods are constantly evolving, common attack vectors include: Spear phishing - Highly targeted emails personalized with researched details to appear authentic. Often used to compromise executive and privileged accounts.

DNS 64

DNS Phishing Social Engineering Engineering 64

Security Boulevard

JUNE 21, 2021

Other attack tactics include exploiting overprovisioned workforce, supplier, and partner credentials to gain access to ecosystem applications; weak authentication policies; and gaining access through unsecured non-human identities, such as Internet of Things (IoT)-connected devices. Lesson 3: Strengthen Authentication.

Manufacturing 45

Manufacturing IoT CISO Authentication 45

Security Boulevard

JUNE 2, 2022

Your critical software infrastructure includes enterprise-wide applications such as accounting systems, customer relationship systems, invoicing systems, network or database maintenance scripts and any other software that’s critical to the efficient functioning of your business. Download the eBook to learn more. UTM Medium. UTM Source.

Software 52

Software Malware Backups Marketing 52

The Last Watchdog

JUNE 21, 2023

. – June 21, 2023 – Axiad , a leading provider of organization-wide passwordless orchestration, today announced the results of its Passwordless Authentication survey fielded by Enterprise Research Group (ERG), a full-service market research company. and Canada were surveyed.

Authentication 140

Authentication Social Engineering Passwords Phishing 140