Duo's Security Blog

NOVEMBER 20, 2023

“It took nearly 11 months (328 days) to identity and contain data breaches resulting from stolen or compromised credentials.” – IBM’s Cost of Data Breach Report 2023 I recently came across a 2012 article from CSO Online , and realized that it has been more than 11 years since the phrase “Identity is the new perimeter” was coined!

Threat Detection 138

Threat Detection Authentication Accountability Data breaches 138

CSO Magazine

DECEMBER 13, 2021

In this article, we're going to look at one specific aspect of the pen tester's trade: the tools they use to defeat their clients' defenses. To read this article in full, please click here For an in-depth look at what penetration testing entails, you'll want to read our explainer on the subject.

Penetration Testing 145

Penetration Testing 145

CSO Magazine

JANUARY 17, 2022

To read this article in full, please click here (Insider Story) Teresa Merklin specializes in cyber risk assessment and engineering for cyber resiliency.

Cyber Risk 142

Cyber Risk Engineering Risk 142

CSO Magazine

JANUARY 24, 2022

To read this article in full, please click here (Insider Story) The hybrid working model, fast-paced digitalization, and increased number of ransomware incidents have changed the security landscape, making CISOs' jobs more complex than ever.

CISO 141

CISO Cybersecurity Ransomware 141

CSO Magazine

JUNE 6, 2023

To read this article in full, please click here A key problem, cybersecurity experts have demonstrated, is the ability of ChatGPT and other large language models (LLMs) to generate polymorphic, or mutating, code to evade endpoint detection and response (EDR) systems.

Malware 145

Malware Cybersecurity 145

CSO Magazine

NOVEMBER 18, 2021

To read this article in full, please click here Consequently, the SolarWinds spyware infiltration , the Microsoft Exchange hack , and ransomware attacks launched by criminal gangs harbored by the Kremlin dominate headlines and drive nation-state cybersecurity responses.

Spyware 142

Spyware Ransomware Hacking Cybersecurity 142

CSO Magazine

FEBRUARY 15, 2023

This article will share reasons why ML has risen to such importance in cybersecurity, share some of the challenges of this particular application of the technology and describe the future that machine learning enables. To read this article in full, please click here

Cybersecurity 130

Cybersecurity Big data IoT Internet 130

CSO Magazine

AUGUST 8, 2022

To read this article in full, please click here VMware’s 2022 Global Incident Threat Response Report shows a steady rise in extortionary ransomware attacks and BEC, alongside fresh jumps in deepfakes and zero-day exploits.

Ransomware 137

Ransomware Cybersecurity 137

CSO Magazine

OCTOBER 26, 2021

To read this article in full, please click here (Insider Story) Of course, that's every spy and cybercriminal's dream, but only ethical hackers, also known as white hat hackers or penetration testers, can feel sure that they'll get away with their break-ins.

143

143

CSO Magazine

JUNE 7, 2023

To read this article in full, please click here “However, the threat actors involved can easily switch tactics to redirect users to other types of malware, such as banking trojans to steal credentials and financial information or ransomware ,” Bitdefender said in a blog.

Adware 139

Adware Malware Banking Mobile 139

CSO Magazine

JANUARY 6, 2022

Meanwhile, CSOs also must help ensure their organizations are in compliance with new regulations. To read this article in full, please click here Remote work, virtual meetings, hybrid cloud networks , and SaaS adoption have all brought about complex IT infrastructures that are opening up new threat avenues.

Digital transformation 142

Digital transformation Cybersecurity Technology 142

CSO Magazine

MARCH 23, 2023

To read this article in full, please click here The vulnerabilities identified by CISA were tracked in products from ICS providers including Siemens, Hitachi, Rockwell, Delta Electronics, VISAM, and Keysight.

Cybersecurity 133

Cybersecurity 133

CSO Magazine

MAY 26, 2022

To read this article in full, please click here The soldiers stole 27 pieces of farm machinery and shipped them primarily to Chechnya, 700 miles away, only to discover they had been rendered inoperable due to a "kill switch."

138

138

CSO Magazine

SEPTEMBER 26, 2022

To read this article in full, please click here Reliance on VPNs for remote access is putting enterprises at significant risk as social engineering , ransomware , and malware attacks continue to advance, exposing businesses to greater risk, according to a new report by cloud security company Zscaler.

Social Engineering 127

Social Engineering Engineering Risk Ransomware 127

CSO Magazine

MAY 5, 2023

To read this article in full, please click here

Threat Detection 139

Threat Detection Cybersecurity Risk 139

CSO Magazine

JUNE 6, 2022

To read this article in full, please click here At RSAC 2022, starting June 6, new product showcases are dominated by identity and access security, SaaS services and security operations center ( SOC ) enhancements. Here are some of the most interesting new products set to be shown at the show.

Cybersecurity 144

Cybersecurity 144

CSO Magazine

JANUARY 13, 2022

To read this article in full, please click here

Social Engineering 139

Social Engineering Identity Theft Engineering 139

CSO Magazine

APRIL 12, 2022

To read this article in full, please click here The findings indicate that when it comes to IAM in the cloud, organizations are struggling to put good governance in place. The report also identifies five attack groups that have been detected targeting cloud environments and reveals their attack methods.

Government 143

Government 143

CSO Magazine

JULY 4, 2022

To read this article in full, please click here "They're getting away from worrying about end results—a data breach or loss is an end result—and looking at the causes of those results (data access, misconfigurations, insecure applications) and taking control of them."

Data breaches 145

Data breaches 145

CSO Magazine

JULY 25, 2022

To read this article in full, please click here Phishing is the first step for all kinds of attacks, from stealing passwords to downloading malware that can provide a backdoor into a corporate network. The fight against phishing is a frustrating one, and it falls squarely onto IT's shoulders.

Phishing 136

Phishing Passwords Malware 136

SecureWorld News

JUNE 26, 2023

According to a SolarWinds spokesperson quoted in the CNN article: "We are cooperating in a long investigative process that seems to be progressing to charges by the SEC against our company and officers. Any potential action will make the entire industry less secure by having a chilling effect on cyber incident disclosure."

CISO 108

CISO CSO Data privacy Cyber Risk 108

CSO Magazine

SEPTEMBER 6, 2022

To read this article in full, please click here Researcher Felix Krause detailed how popular in-app browsers inject JavaScript code into third-party websites, granting host apps the ability to track certain interactions, including form inputs like passwords and addresses along with image/link clicks.

Risk 137

Risk Data privacy Passwords 137

CSO Magazine

MARCH 11, 2022

To read this article in full, please click here According to AppOmni, the misconfiguration resulted from a combination of customer-managed configurations and over-provisioning of permissions to guest users.

Internet 137

Internet Internet 137

CSO Magazine

APRIL 28, 2023

To read this article in full, please click here By examining these topics, the CSA said it aims to raise awareness of the potential threats and emphasize the need for robust security measures and responsible AI development.

Phishing 138

Phishing Cybersecurity 138

CSO Magazine

MAY 30, 2022

To read this article in full, please click here "Since most of the cloud hosts run Linux, being able to compromise Linux-based platforms allows the attacker to access an enormous amount of resources or to inflict substantial damage through ransomware and wipers."

Malware 138

Malware IoT Internet Internet 138

CSO Magazine

JUNE 2, 2022

To read this article in full, please click here

Cybersecurity 135

Cybersecurity Technology 135

CSO Magazine

APRIL 4, 2022

To read this article in full, please click here "All of this is happening unbeknownst to the owner of the computer. The goal is to grow the size of the botnet, which collectively can automate and expedite large attacks."

DDOS 145

DDOS Internet Internet Malware 145

CSO Magazine

DECEMBER 16, 2021

To read this article in full, please click here At the same time, other factors like customer satisfaction and worker happiness surged. This has led many organizations to declare that teleworking in some form would continue, even after the pandemic is defeated.

Mobile 145

Mobile 145

CSO Magazine

OCTOBER 4, 2022

To read this article in full, please click here Here are eight unusual, unexpected, and relatively strange ways employees can accidently expose data, along with advice for addressing and mitigating the risks associated with them.

Risk 143

Risk Phishing Passwords Cybersecurity 143

CSO Magazine

APRIL 14, 2023

To read this article in full, please click here Europe's national privacy regulators said on Thursday that the decision came following discussions about recent enforcement action undertaken by the Italian data protection authority against OpenAI regarding its ChatGPT service.

Technology 132

Technology 132

CSO Magazine

DECEMBER 12, 2022

To read this article in full, please click here "With the shifts in the cybersecurity landscape, 2022 has been a milestone year we will look back on when studying the history of when and why cybersecurity and digital trust were fused together," says Kory Daniels, CISO at Trustwave.

CISO 140

CISO Data breaches Cybersecurity 140

CSO Magazine

FEBRUARY 27, 2023

To read this article in full, please click here With Russia now controlling around 18% of Ukraine's territory including Donbas and Crimea, tech workers face formidable challenges. Air raid sirens blast all the time. Explosions are heard in the distance. Power and internet outages are common. Sometimes, code is written in a basement.

InfoSec 137

InfoSec Cybersecurity Internet Internet 137

CSO Magazine

SEPTEMBER 22, 2022

To read this article in full, please click here One of the most popular ways is spamming an employee whose credentials have been compromised with MFA authorization requests until they become annoyed and approve the request through their authenticators app.

Authentication 141

Authentication Network Security Accountability 141

CSO Magazine

DECEMBER 10, 2021

To read this article in full, please click here Attacks started soon after, making the flaw a zero-day (unpatched) issue at the moment of exploitation. Apache has since released Log4j 2.15.0 which includes a fix.

141

141

CSO Magazine

JANUARY 13, 2023

To read this article in full, please click here Announced by Citrix on November 8, 2022, the vulnerability, identified as CVE-2022-27510 , allows for the potential bypass of authentication measures on two Citrix products: the Application Delivery Controller (ADC) and Gateway.

Cyber Insurance 129

Cyber Insurance Ransomware Insurance Authentication 129

CSO Magazine

SEPTEMBER 30, 2022

To read this article in full, please click here

Malware 125

Malware Cybersecurity 125

CSO Magazine

DECEMBER 26, 2022

To read this article in full, please click here California already had a privacy law in place, the California Consumer Privacy Act (CCPA), adopted in 2018. It went into effect in January 2020, and enforcement officially began in July 2020.

Data privacy 133

Data privacy 133