Duo's Security Blog

JUNE 12, 2023

Passwordless is the modern authentication method that does not rely on passwords, eliminating the risks that come with weak, lost, or stolen credentials. It is MFA Phishing Resistant. It was exactly what I was looking for, which was a simple and elegant way to use YubiKeys or Windows Hello or Touch ID to replace the password.

Authentication 135

Authentication Passwords Password Management Phishing 135

The Last Watchdog

AUGUST 19, 2021

Could be weak vulnerability management and poor patching hygiene. Could be phished credentials. Sascha Fahrbach , cybersecurity evangelist, Fudo Security : Our personal data has immense value to cyber criminals; it is very likely that hackers will now weaponize this data to create advanced phishing attacks. Could be a bad actor.

Mobile 235

Mobile Data breaches Authentication Accountability 235

Security Boulevard

OCTOBER 4, 2024

Plus, get the latest on Active Directory security, CISO salary trends and ransomware attacks! 1 - CISA to promote MFA, software updates, phishing protection during Cybersecurity Awareness Month October has arrived, and with it Cybersecurity Awareness Month, now in its 21st year. Keep all your software updated.

Cybersecurity 69

Cybersecurity CISO Ransomware Technology 69

Security Boulevard

FEBRUARY 1, 2024

Passkeys and The Beginning of Stronger Authentication madhav Fri, 02/02/2024 - 05:23 How passkeys are rewriting the current threat landscape Lillian, an experienced CISO, surveyed the threat landscape. Despite solid cybersecurity defenses within her enterprise, the reliance on age-old passwords left it vulnerable.

Authentication 64

Authentication Passwords CISO Password Management 64

SecureWorld News

MAY 19, 2020

Sherry brought to Princeton his 25 years of technology experience, 12 of which was in higher education as the former CISO at Brown University. Sherry explained that he (the CISO) would have no operational responsibilities in the beginning to focus solely on the execution of the mission. What will appeal to people?

Cybersecurity 63

Cybersecurity CISO Risk Education 63

eSecurity Planet

MAY 2, 2024

Compromised Credentials Compromised identities from phishing, info stealers, keyloggers, and bad password habits provide the entry point for most ransomware attacks and data breaches. Identity and access management (IAM) : Helps improve management of users, single-sign-on (SSO), and more in Active Directory through automated workflows.

Cybersecurity 121

Cybersecurity DDOS Penetration Testing Passwords 121

Spinone

NOVEMBER 21, 2019

Phishing Simulations from Cyber Aware Phishing simulation is a program designed for business owners and employers to train their staff to identify phishing scams. Given that phishing accounts for 90% of data breaches , this simulation must be a part of every company’s security education.

Social Engineering 40

Social Engineering Accountability Phishing Cybersecurity 40

Duo's Security Blog

MAY 23, 2023

Passwords are a weak point in modern-day secure authentication practices, with Verizon highlighting that almost 50% of breaches start with compromised credentials. In our previous two features, we covered the dangers of phishing (one method of credential compromise) and how to mitigate its impact on users. Likely not immediately.

Authentication 144

Authentication Passwords Data breaches Phishing 144

CyberSecurity Insiders

JULY 21, 2021

By: Matt Lindley, COO and CISO at NINJIO. But a survey conducted by Google and Harris found that many people still refuse to adopt even the most essential credential security measures: just 37 percent use two-factor authentication, around a third change their passwords regularly, and a mere 15 percent use a password manager.

Social Engineering 145

Social Engineering Password Management Passwords Accountability 145

eSecurity Planet

JANUARY 12, 2022

Russia has very advanced cyber warfare skills which keep them hidden once a network is compromised, although ironically, the initial attack vectors are typically those of low-tech email phishing campaigns, taking advantage of people reusing already compromised passwords or using easily guessed passwords.”. Tactics and Responses.

Passwords 120

Passwords Software Ransomware Cybersecurity 120

SecureWorld News

APRIL 1, 2025

The AI-powered scam playbook From generative AI (GenAI) phishing emails to deepfake impersonations of IRS agents, attackers are raising the barand the risks. Cybercriminals are fully aware of the stress and anxiety that surrounds tax season, and every year they take full advantage," said Devin Ertel, CISO at Menlo Security.

Scams 88

Scams Identity Theft Phishing CISO 88