Duo's Security Blog

JANUARY 11, 2024

Secure Cisco VPN logins in less than an hour Authenticate users in seconds Verify user + device posture Blog unmanaged devices Mitigate modern security threats with phishing-resistant authentication Join the thousands of Cisco firewall customers who take advantage of protecting Cisco VPN logins with Cisco Duo Single Sign-On via SAML 2.0

VPN 124

VPN Authentication Firewall Risk 124

eSecurity Planet

OCTOBER 28, 2024

The attacker must be authenticated and have Site Owner permissions to conduct the attack, but with those, they could inject and execute arbitrary code in SharePoint Server contexts. The problem: The same day Cisco published the advisory for CVE-2024-20481, it also notified about a critical flaw in the Cisco Secure Firewall Management Center.

Phishing 102

Phishing Authentication VPN Software 102

Krebs on Security

AUGUST 2, 2019

According to a source with direct knowledge of the breach investigation, the problem stemmed in part from a misconfigured open-source Web Application Firewall (WAF) that Capital One was using as part of its operations hosted in the cloud with Amazon Web Services (AWS).

Hacking 267

Hacking Firewall Data breaches Software 267

Krebs on Security

NOVEMBER 17, 2022

In a blog post published today to coincide with a Black Hat Dubai talk on their discoveries, James and co-author Joel Lathrop said they were motivated to crack Zeppelin after the ransomware gang started attacking nonprofit and charity organizations.

Ransomware 355

Ransomware Encryption Backups Manufacturing 355

The Last Watchdog

MAY 24, 2023

Encryption in transit provides eavesdropping protection and payload authenticity. More importantly, it provides message authenticity: a bad actor cannot change the data or instructions being sent. Authentication use cases When two applications are communicating, we want to know what those applications are.

Authentication 223

Authentication Banking Architecture Encryption 223

CyberSecurity Insiders

JUNE 16, 2021

This blog was written by an independent guest blogger. Nobody, including clients inside the firewall, should be trusted, per Zero Trust. Organizations mandate users to be authentic and validated with the appropriate privacy configuration before accessing apps and information. Zero Trust is a security paradigm.

Architecture 138

Architecture Network Security Firewall Data breaches 138

Security Boulevard

APRIL 18, 2025

This blog post was published on April 18 and reflects VPR at that time. At the time this blog was published, no known exploitation has been observed, however with the ease of exploitation and critical severity, we anticipate attacks will occur soon. This vulnerability received the maximum CVSSv3 score of 10.0 and below OTP-27.3.3

Authentication 59

Authentication Firewall 59

The Last Watchdog

MAY 19, 2022

Wikipedia uses a CMS for textual entries, blog posts, images, photographs, videos, charts, graphics, and “ talk pages ” that help its many contributors collaborate. Nearly all CMS platforms, whether traditional or headless, offer some level of built-in security to authenticate users who are allowed to view, add, remove, or change content.

Data breaches 262

Data breaches Encryption Mobile Technology 262

The Last Watchdog

APRIL 5, 2022

China has enclosed its national internet servers within what is colloquially called ‘the Great Firewall.’ ’ This firewall even goes as far as to block the latest versions of the encryption service TLS (v1.3) These are the foremost reasons China is ranked fourth worst globally regarding press freedoms.

Hacking 243

Hacking Passwords Internet Internet 243

SecureWorld News

FEBRUARY 10, 2025

Defending against DDoS attacks has long depended on traditional measures like firewalls and rate limiting. The attackers place themselves between the user and the legitimate website, intercepting session data and bypassing multi-factor authentication (MFA) by relaying the authentication process in real time.

DDOS 70

DDOS Ransomware Authentication Phishing 70

Duo's Security Blog

DECEMBER 2, 2024

Duo Security offers a suite of solutions designed to provide secure authentication and single sign-on (SSO) for applications. It allows users to log into applications once and gain access to a variety of cloud and on-premises apps (as long as they support SAML or OIDC protocols) with seamless multi-factor authentication (MFA).

Government 59

Government Firewall Authentication Cybersecurity 59

Security Affairs

OCTOBER 10, 2022

Fortinet has confirmed that the recently disclosed critical authentication bypass issue (CVE-2022-40684) is being exploited in the wild. Last week, Fortinet addressed a critical authentication bypass flaw, tracked as CVE-2022-40684 , that impacted FortiGate firewalls and FortiProxy web proxies.

Authentication 126

Authentication Firewall Hacking Risk 126

The Last Watchdog

MAY 2, 2023

Experts must monitor firewalls, test business continuity plans and identify vulnerabilities with seemingly little payoff. Enforce strict authentication and verification measures for server access requests. An increasingly digitized world means analysts can’t rest. These feelings are a side effect of cybersecurity burnout.

Cybersecurity 202

Cybersecurity Firewall Risk Cyber Risk 202

The Last Watchdog

MARCH 4, 2024

Investing in top-notch firewalls is also essential, as they serve as the first line of defense against external threats. Strengthen authentication. Next, implement multi-factor authentication to make gaining access even more difficult for hackers. Train staff regularly. A robust security plan is only as good as its weakest link.

Social Engineering 213

Social Engineering Risk Cybersecurity Authentication 213

The Last Watchdog

DECEMBER 31, 2019

All the encryption , firewalls , cryptography, SCADA systems , and other IT security measures would be useless if that were to occur. Some of the countermeasures that can be considered are CCTV, alarms, firewalls, exterior lighting, fences, and locks. One such measure is to authenticate the users who can access the server.

Cyber Risk 173

Cyber Risk Risk Firewall Surveillance 173

Duo's Security Blog

APRIL 18, 2025

For this reason, we have evolved the application from merely providing health checks to incorporating a myriad of features that ease the burden of MFA, enhance security, and offer an additional method of authentication. Duo keeps your users secure without getting in their way with relentless authentication prompts.

Authentication 52

Authentication Energy and Utilities Phishing Mobile 52

The Last Watchdog

MARCH 31, 2022

Seeing the flaws continue year after year, the industry began linking authentication of valid software components to the underlying hardware, or the “root of trust”. This approach allows for compromised software to be identified during the authentication process.

Artificial Intelligence 229

Artificial Intelligence Threat Detection Engineering Software 229

Security Boulevard

JANUARY 14, 2025

Fortinet patched a zero day authentication bypass vulnerability in FortiOS and FortiProxy that has been actively exploited in the wild as a zero-day since November 2024. CVE Description CVSSv3 CVE-2024-55591 FortiOS and FortiProxy Authentication Bypass Vulnerability 9.6 websocket module.

Authentication 59

Authentication VPN Firewall 59

The Last Watchdog

FEBRUARY 27, 2023

Each of these elements must be validated across multiple security controls, like next-generation firewall (NGFW) and data loss protection (DLP) tools. Once again, there is no standard set of ZT test cases to guide this validation. Security controls that impede important business activities, will motivate users to try to bypass them.

Risk 208

Risk Architecture Firewall Telecommunications 208

Responsible Cyber

JULY 14, 2024

Protecting sensitive information and maintaining seamless connectivity across distributed environments necessitates robust cybersecurity measures, with firewalls playing a crucial role. A firewall for remote work serves as a formidable barrier against these threats, monitoring incoming and outgoing traffic to block malicious activities.

Firewall 52

Firewall VPN Authentication Cyber threats 52

Cisco Security

AUGUST 26, 2022

This new integration supports Umbrella proxy, cloud firewall, IP, and DNS logs. This integration expands on Elastic’s on-going expansion of Cisco integrations including ASA, Nexus, Meraki, Duo and Secure Firewall Threat Defense. New Cisco Firepower Next-Gen Firewall Integrations. Read more here. Read more here.

Firewall 145

Firewall Authentication Passwords Threat Detection 145

Security Affairs

APRIL 21, 2022

Umbrella integrates secure web gateway, firewall, DNS-layer security, and cloud access security broker (CASB) functionality to protect systems against threats. The CVE-2022-20773 flaw resides in the key-based SSH authentication mechanism of Cisco Umbrella Virtual Appliance and is due to the presence of a static SSH host key.

DNS 126

DNS Internet Internet Firewall 126

Troy Hunt

NOVEMBER 25, 2020

When Patching Goes Wrong Now that I've finished talking about how patching should be autonomous, let's talk about the problems with that starting with an issue I raised in this tweet from yesterday: In the first of my IoT blog series yesterday, I lamented how one of my smart plugs was unexplainably inaccessible. So, what's the right approach?

IoT 362

IoT Firmware Risk Manufacturing 362

Duo's Security Blog

MARCH 31, 2025

87 The implementation of multi-factor authentication (MFA) is no longer optional. With the widest range of supported authenticators, Duo helps organizations transition away from weaker SMS and phone-call 2FA and towards push-based smartphone apps with verified number matching and phishing-resistant or passwordless authenticators.

Healthcare 52

Healthcare Authentication Risk Encryption 52

Security Boulevard

NOVEMBER 7, 2022

Fortinet recently discovered an authentication bypass flaw in its FortiOS, FortiProxy, and FortiSwitchManager appliances. The post Fortinet Warns of New Authentication Bypass Vulnerability appeared first on Kratikal Blogs. The post Fortinet Warns of New Authentication Bypass Vulnerability appeared first on Security Boulevard.

Authentication 52

Authentication Risk Firewall Cyber threats 52

Security Affairs

NOVEMBER 22, 2022

APIs have unique threat implications that aren’t fully solved by web application firewalls or identity and access management solutions. Broken Object Level Authentication (BOLA). APIs with broken object level authentication allow attackers to easily exploit API endpoints by manipulating the ID of an object sent within an API request.

Authentication 132

Authentication Accountability B2B Digital transformation 132

Digital Shadows

FEBRUARY 17, 2025

Your Action Plan In addition to foundational security measuressuch as enabling multifactor authentication (MFA) and disabling Remote Desktop Protocol (RDP) on unnecessary systemsdefending against BlackLock requires strategic focus on its targeted infrastructure.

Ransomware 83

Ransomware Malware Risk Accountability 83

Security Boulevard

APRIL 25, 2023

Yet identities sprawl, duplicate and make connections far more than traditional perimeter safeguards like firewalls. Imagine distributing thousands of firewalls and leaving them open to consume and be consumed by third-party applications with nothing but a sign-up form to make the arrangement. Does that seem safe? Continuity.

Architecture 59

Architecture Firewall Authentication Technology 59

Security Affairs

APRIL 19, 2022

UPnP is an insecure protocol, it uses network UDP multicasts, and doesn’t support encryption and authentication. “It is recommended that your QNAP NAS stay behind your router and firewall without a public IP address. ” reads the advisory published by QNAP. Do not let your QNAP NAS obtain a public IP address.

Internet 110

Internet Internet VPN Firewall 110

CyberSecurity Insiders

APRIL 26, 2023

This is the fourth blog in the series focused on PCI DSS, written by an AT&T Cybersecurity consultant. See the first blog relating to IAM and PCI DSS here. See the second blog on PCI DSS reporting details to ensure when contracting quarterly CDE tests here.

Firewall 96

Firewall Accountability Cybersecurity Authentication 96

Security Affairs

JANUARY 17, 2022

the default role of users who register at the blog) to administrator, so that they can register on the vulnerable site as an administrator and completely take it over. We develop and release a firewall rule to protect Wordfence users. December 5, 2021 – The firewall rule becomes available to free Wordfence users.

Firewall 145

Firewall Hacking Authentication Information Security 145

Cisco Security

DECEMBER 13, 2022

In our last blog , we gave a rundown of what the Telecommunications (Security) Act (TSA) is, why it’s been introduced, who it affects, when it starts, and how firms can prepare. ny of the themes introduced in the code of practice can be aligned with the themes in a zero trust security model, which are also a focus for CISOs.

Telecommunications 145

Telecommunications Authentication Risk Cyber Risk 145

Security Through Education

OCTOBER 27, 2021

Build a Human Firewall. Securing your work environment requires you to create what is referred to among security professionals as a human firewall. A human firewall is made up of the defenses the target presents to the attacker during a request for information. Use company-approved/vetted devices and applications.

Cybersecurity 137

Cybersecurity Social Engineering Firewall Engineering 137

Security Affairs

APRIL 5, 2023

Improper Authentication Validation CWE-287 ( CVE-2023–1752 , CVSS3.0: To mitigate the risk of the exploitation of the above flaws, it is recommended to disable internet connectivity for vulnerable Nexx devices or protect them with a firewall. Authorization Bypass Through User-Controlled Key CWE-639 ( CVE-2023–1749 , CVSS3.0:

Manufacturing 98

Manufacturing Media Firewall Internet 98

Duo's Security Blog

JANUARY 11, 2023

Then it verifies user identity with advanced multi-factor authentication (MFA). Untrusted remote users need a secure way to navigate the internet and corporate firewalls to establish trust and gain access. No more firewall, no more AAA or whatsoever complicated thing. Why do I need DNG? How does DNG for SMB work?

VPN 111

VPN Firewall Authentication Internet 111

eSecurity Planet

MARCH 16, 2023

. “An attacker who successfully exploited this vulnerability could access a user’s Net-NTLMv2 hash which could be used as a basis of an NTLM Relay attack against another service to authenticate as the user,” the company wrote. This will prevent the sending of NTLM authentication messages to remote file shares.

Energy and Utilities 98

Energy and Utilities Authentication Firewall Ransomware 98

NopSec

APRIL 6, 2015

Enterprise organizations need vulnerability risk management solutions that integrate with the existing authentication and asset management infrastructure. Unified VRM was already compatible with MS Active Directory authentication. On top of authentication, Unified VRM has an additional integration with MS Active Directory.

Authentication 40

Authentication Firewall Risk 40