Duo's Security Blog

APRIL 20, 2023

In many rnodern phishing attacks, malicious links send employees to copies of otherwise farniliar websites—like an internal payroll portal login page where it’s quick to muscle-rnemory a username and password. Strong security practices layer to protect against phishing attacks. Additional IT service headcount ended up being unnecessary.

Phishing 106

Phishing Social Engineering Authentication Engineering 106

Security Boulevard

DECEMBER 6, 2024

Prohibit the storage of passwords in plaintext. Thats according to Corvus Insurances Q3 2024 Cyber Threat Report , which said many of the ransomware attacks in Q3 leveraged outdated VPN software and poorly protected VPN gateways. Keep systems and software up to date. Adopt a centralized identity and access management system.

Cybersecurity 64

Cybersecurity VPN Ransomware Software 64

Duo's Security Blog

FEBRUARY 4, 2025

Authentication is key and a core requirement Considered by insurers as one of the most important security controls, multi-factor authentication (MFA) protects against stolen credentials by using two or more factors to identify the user (beyond the traditional username and password).

Cyber Insurance 64

Cyber Insurance Insurance Authentication Risk 64

NopSec

FEBRUARY 28, 2024

Finally, we cover a Microsoft Exchange privilege escalation vulnerability that could enable motivated threat actors to steal your NTLM password hash. The research endeavored to edit the grub boot loader to force a shell to boot, but the grub password was password protected. CVE-2024-22107 (RCE) High Low 7.2

Authentication 59

Authentication Accountability Passwords Risk 59

NopSec

FEBRUARY 15, 2017

Attackers can then determine the IP range of their victim’s domains, WHOIS records which sometimes contain information on the technical contacts in the company, or subdomains that may contain the victim’s webmail portal, VPN login page, or a company’s Intranet. The education sector, for instance, has seen its fair share.

Phishing 40

Phishing Social Engineering Engineering Healthcare 40

NetSpi Executives

APRIL 27, 2024

terminal services, virtual private networks (VPNs), and remote desktops—often use weak passwords and do not require MFA. Attackers guess the passwords easily, find them in open source code repositories, or collect them via phishing. Administrators who access IT management interfaces—e.g., Enable multi-factor authentication.

Ransomware 52

Ransomware Cyber Insurance Backups Insurance 52

Webroot

OCTOBER 31, 2024

Steam the Webinar on demand HERE As we look back on the cybersecurity landscape of 2024, it’s clear that the world of digital threats continues to evolve at an alarming pace in parallel with AI. Be Cautious with Smart Devices: Secure your IoT devices by changing default passwords and keeping firmware updated.

Malware 109

Malware Ransomware Passwords Healthcare 109

Duo's Security Blog

JANUARY 28, 2022

Imagine a shift away from logging into a “network” to having security seamlessly built into the network, and multi-factor authentication and authorization continuously performed at the application level on the fly — without users typing passwords.

Authentication 52

Authentication Government DNS Encryption 52