Authentication eBook Social Engineering 
Duo's Security Blog
DECEMBER 12, 2022
And in our ebook, Retail Cybersecurity: The Journey to Zero Trust , we share ways that Duo can help retailers improve their security posture. Add a passwordless authentication factor like a biometric and block attempts at access. Get started by downloading our ebook, Retail Cybersecurity: The Journey to Zero Trust , today.
NetSpi Technical
NOVEMBER 2, 2023
To understand the vulnerability, there are a few things to understand about the Entra ID authentication flow. Within any Entra ID environment, there are numerous cloud applications that are leveraged when a user authenticates. This odd load-time behavior is what alerted me to the potential for an MFA bypass.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Duo's Security Blog
MARCH 4, 2024
Recently, attackers have targeted multi-factor authentication (MFA). Even if an attacker has access to a username and password, they still need access to the second authentication factor to break into the organization. This becomes a constant cycle of organizations introducing new protections and attackers finding ways to exploit them.
Duo's Security Blog
NOVEMBER 15, 2024
Traditionally, organizations have relied on strong authentication requirements, such as multi-factor authentication (MFA), to address compromised access. Moving beyond authentication In conclusion, the rise of identity security necessitates a shift beyond relying solely on authentication to address compromised identities.
Duo's Security Blog
SEPTEMBER 19, 2024
In many enterprises, this includes administrators for tools like on-premises and cloud directories, single sign-on (SSO) solutions and multi-factor authentication (MFA) providers. They famously use a variety of social engineering techniques (e.g., Their techniques have been outlined in this helpful briefing from CISA.
Duo's Security Blog
APRIL 20, 2023
Accounting for nearly a quarter of reported incidents in Australia, phishing is a broad category of social engineering with several variations. These social engineering techniques tricked employees into revealing their login credentials, which allowed attackers to access additional systems and data. What is phishing?
Duo's Security Blog
OCTOBER 8, 2024
As organizations continue to rely on digital identities for access control and authentication, the risk of identity compromise grows. Educated employees are less likely to fall victim to social engineering attacks, reducing the risk of future breaches.
Expert insights. Personalized for you.
83 
Let's personalize your content