Duo's Security Blog

APRIL 29, 2022

Defining “storytelling” in an InfoSec context Inspiration - We the People: Democratizing Security “Storytelling” is a word that you will hear frequently within Duo’s creative team — now part of a Brand & Strategy unit for Cisco’s rebranded security organization Cisco Secure. . But where to begin?

Marketing 98

Marketing InfoSec Architecture Authentication 98

SecureWorld News

SEPTEMBER 7, 2023

Glenn Kapetansky, Senior Principal & Chief Security Officer, Trexin: "For those who predict that quantum computing will break InfoSec, I want to point out that very smart people have been working equally long on next-gen cyber techniques that work in a post-quantum computing world.

Encryption 113

Encryption Technology Risk Architecture 113

SC Magazine

MAY 3, 2021

Godzilla vs. Kong may be an epic match-up, but it’s nothing compared to the ongoing battle between infosec professionals and emerging cloud-based threats. If they can pass this authentication process, then they don’t even need a password to log in. Kong and other popular films such as The Dark Knight and Jurassic World.

CSO 69

CSO InfoSec Media Authentication 69

Cisco Security

AUGUST 26, 2021

We constantly see new threats, and threat vectors, come and go; which puts a tremendous strain on the InfoSec teams that have to protect organizations and businesses from these threats. Active Lock protects individual files by requiring step-up authentication until the threat is cleared. Access the atomic actions here. [8]

Technology 145

Technology Firewall VPN Authentication 145

SecureWorld News

MAY 16, 2023

Brennan is speaking at SecureWorld Chicago on June 8, tackling the topic of "I Can See Clearly Now, the Threats Are Gone: The State of InfoSec and Threat Intelligence Today." On the plus side, they did mention multi-factor authentication and EDR. Botts is Director of the Global Cyber Security Program at University of St.

Cybersecurity 98

Cybersecurity Insurance Cyber Risk CISO 98

Thales Cloud Protection & Licensing

JANUARY 7, 2022

Many analysts think of this tech as a subdomain of Zero Trust architecture – the initial but not the only building block of the whole concept. Is it possible to build an architecture in which the same rules apply to all users, or is the emergence of privileged accounts inevitable? Do Zero Trust systems match the advertised concept?

Architecture 71

Architecture Technology Software Marketing 71

IT Security Guru

APRIL 1, 2021

As Robin Oldham remarked in his weekly infosec newsletter “ If true —then the company’s culture, practices, technical solutions, or assure activities must also have therefore been pretty spectacularly lax. Kevin is a judge for the 2021 GSMA Global Mobile Awards (GloMo’s) for Authentication & Security.

Marketing 65

Marketing Artificial Intelligence Technology InfoSec 65

Herjavec Group

APRIL 26, 2021

Commerce is now advancing at a speed that makes it extremely difficult for infosec professionals to keep up. It’s a planning process of defining roles and endpoints, tactically rolling out tools and processes, and building the architecture to maintain and improve moving forward. Authenticate their identity. To Your Success , .

Risk 52

Risk Government InfoSec Cybersecurity 52

Security Boulevard

JUNE 15, 2022

It is the de-facto standard for remote administration of servers, with SSH keys acting as identities to enable automated authentication, encryption, and authorization. Each identity, whether a human identity or a machine identity, needs to be authenticated and validated beyond any doubt before being granted access. UTM Medium.

Risk 52

Risk Architecture Digital transformation InfoSec 52

Security Boulevard

OCTOBER 24, 2023

An organization’s users must have trust in both the domain and the fidelity of its architecture. The Local Security Authority Server Service (LSASS) handles the authentication of users within a domain. The Kerberos authentication protocol makes use of ticket requests and grants to authenticate users to remote resources.

Backups 69

Backups Passwords Authentication Accountability 69

Security Boulevard

NOVEMBER 18, 2021

The current API top ten are Broken Object-Level Authorization , Broken User Authentication , Excessive Data Exposure , Lack of Resources & Rate Limiting , Broken Function-Level Authorization , Mass Assignment , Security Misconfiguration , Injection , Improper Assets Management , and Insufficient Logging & Monitoring.

Authentication 64

Authentication Accountability Passwords Engineering 64

Errata Security

MAY 19, 2020

If there's one thing that the entire cybersecurity industry is agreed about (other than hating the term cybersecurity, preferring "infosec" instead) is that you need this vulnerability disclosure program. You'll do threat modeling, then create an architecture and design, and so on. This is fiction. They then patch the code.

Engineering 41

Engineering VPN Encryption Marketing 41

eSecurity Planet

MAY 6, 2021

Web application firewalls or WAFs are essential components to the security of organization networks and service-oriented architecture. At the mention of OWASP, most developers and infosec professionals think of the OWASP Top Ten –an industry-recognized list of the most critical risks to web applications. OWASP Top Ten.

Firewall 52

Firewall DDOS Marketing Technology 52

eSecurity Planet

DECEMBER 19, 2023

Ricardo Villadiego, founder & CEO of Lumu , expects “a significant shift towards adopting models based on passwordless architectures like Google Passkeys as the dominant authentication method to combat phishing and scam campaigns. Joe Payne, President & CEO at Code42 expects biometrics to trigger a shift to insider threats. “As

Cybersecurity 140

Cybersecurity CISO Government Technology 140

The Last Watchdog

MAY 19, 2021

While some of the measures stipulated in the order are considered table stakes like multi-factor authentication, the fact that the order exists will help to raise the collective security posture of products and services. Keatron Evans, principal security researcher, Infosec Institute. Bryson Bort , CEO, SCYTHE.

Hacking 205

Hacking Government Ransomware Technology 205