Duo's Security Blog

DECEMBER 12, 2022

And in our ebook, Retail Cybersecurity: The Journey to Zero Trust , we share ways that Duo can help retailers improve their security posture. Single sign-on (SSO) fortifies MFA by creating fewer passwords and a single dashboard for users to log into to reach all of their applications in one place.

Retail 121

Retail Cyber threats Social Engineering Data breaches 121

The Last Watchdog

JUNE 21, 2023

The top-five data points from the survey include: •92% of respondents are concerned about compromised credentials because of phishing or social engineering attacks, which points to the recent rise and success of both these attack vectors. •59% and Canada were surveyed.

Authentication 140

Authentication Social Engineering Passwords Phishing 140

Duo's Security Blog

APRIL 20, 2023

Accounting for nearly a quarter of reported incidents in Australia, phishing is a broad category of social engineering with several variations. These social engineering techniques tricked employees into revealing their login credentials, which allowed attackers to access additional systems and data. What is phishing?

Phishing 106

Phishing Social Engineering Authentication Engineering 106

Duo's Security Blog

OCTOBER 8, 2024

Reset and Secure Accounts: Force a password reset for all affected accounts and consider strengthening MFA requirements. Resetting passwords and adding stronger MFA can help prevent attackers from regaining access using stolen credentials. For example, if SMS was still allowed as an MFA factor, maybe move up to Verified Push.

Passwords 111

Passwords Accountability Education Social Engineering 111

Duo's Security Blog

MARCH 4, 2024

MFA is a common second line of defense against compromised passwords. Even if an attacker has access to a username and password, they still need access to the second authentication factor to break into the organization. the password) from the login process and instead uses “something you are” (e.g., a device).

Authentication 86

Authentication Social Engineering Passwords Risk 86

Duo's Security Blog

SEPTEMBER 19, 2024

They famously use a variety of social engineering techniques (e.g., calling the help desk and asking for password and MFA resets) to gain initial access to environments. This allows them to perform privilege escalation and maintain access even when passwords are changed.

Accountability 119

Accountability Risk Authentication Social Engineering 119

NetSpi Technical

NOVEMBER 2, 2023

These credentials can be brute forced through password sprays, found in online dumps, or obtained through social engineering. Find more stories like these in our Azure Pentesting eBook. The post Abusing Entra ID Misconfigurations to Bypass MFA appeared first on NetSPI.

Authentication 143

Authentication Accountability Social Engineering Penetration Testing 143