Duo's Security Blog

DECEMBER 12, 2022

And in our ebook, Retail Cybersecurity: The Journey to Zero Trust , we share ways that Duo can help retailers improve their security posture. Get started by downloading our ebook, Retail Cybersecurity: The Journey to Zero Trust , today. In this post, we break down some of the threats facing retail security teams.

Retail 121

Retail Cyber threats Social Engineering Data breaches 121

The Last Watchdog

JUNE 21, 2023

The top-five data points from the survey include: •92% of respondents are concerned about compromised credentials because of phishing or social engineering attacks, which points to the recent rise and success of both these attack vectors. •59%

Authentication 140

Authentication Social Engineering Passwords Cyber Attacks 140

Duo's Security Blog

APRIL 20, 2023

Accounting for nearly a quarter of reported incidents in Australia, phishing is a broad category of social engineering with several variations. These social engineering techniques tricked employees into revealing their login credentials, which allowed attackers to access additional systems and data.

Phishing 106

Phishing Social Engineering Authentication Engineering 106

Duo's Security Blog

SEPTEMBER 19, 2024

To be clear, all administrator accounts — regardless of use case — represent accounts with elevated levels of power and access and should be a focus of heightened security controls. Identity administrator accounts have elevated permissions to deploy, configure, and modify relevant identity systems.

Accountability 119

Accountability Risk Authentication Social Engineering 119

Duo's Security Blog

NOVEMBER 15, 2024

Managing these diverse sets of users with multiple accounts can be challenging, especially if multiple identity stores and identity providers are involved. This is a larger ask than may seem apparent — identity infrastructure has many components and the relationships between accounts and access is often hard to parse.

Threat Detection 111

Threat Detection Cybersecurity Digital transformation Authentication 111

Duo's Security Blog

OCTOBER 8, 2024

Here are some best practices to put in place after an identity breach occurs: Short-term best practices Identify and Remediate Affected Accounts: Conduct a thorough investigation to identify all compromised accounts. Reset and Secure Accounts: Force a password reset for all affected accounts and consider strengthening MFA requirements.

Passwords 111

Passwords Accountability Education Social Engineering 111

NetSpi Technical

NOVEMBER 2, 2023

The application with the misconfiguration is “My Profile” which utilizes “My Account”, “My Apps”, and “My Signins” for additional functionality within the “My Profile” portal. Find more stories like these in our Azure Pentesting eBook.

Authentication 143

Authentication Accountability Social Engineering Penetration Testing 143