Duo's Security Blog

SEPTEMBER 4, 2023

To learn more about the difference between passkeys and passwords – and which solution offers the best value for enterprises – be sure to tune into our webinar, The State of Passkeys in the Enterprise , on September 7th at 9am PST | 12pm EST. Passkeys on User Endpoints Passkeys and passwords can both be stored on endpoints.

Passwords 81

Passwords Authentication Accountability Password Management 81

Duo's Security Blog

APRIL 20, 2023

Totaling up to billions of Australian Dollars at risk each year from hackers and various online scams, it's crucial that organisations (and individuals!) With Duo, the University team stood up integrations within days instead of the predicted weeks or months , protecting their apps and VPN.

Phishing 106

Phishing Social Engineering Authentication Engineering 106

SC Magazine

APRIL 26, 2021

From an economics point of view, solutions that can be simultaneously implemented across both IT and OT environments – such as secure-access platforms with two-factor or multi-factor authentication – is a good place for a utility to start, she added, speaking in an online webinar organized by Cisco Systems.

CISO 82

CISO IoT VPN InfoSec 82

Duo's Security Blog

FEBRUARY 4, 2025

CyberCube, a company specializing in quantifying cyber risk, estimates that the U.S. Healthy devices reduce risk and keep premiums low Hybrid work and increasingly diverse IT ecosystems have complicated the access conundrum, with many SMBs relying on a BYOD policy today.

Cyber Insurance 64

Cyber Insurance Insurance Authentication Risk 64

Security Boulevard

DECEMBER 6, 2024

Those three issues put the reliability and security of free and open source software (FOSS) at risk, a new Linux Foundation study has found. Hosting FOSS projects under individual developer accounts creates multiple risks, such as making it easier for hackers to breach individual computing environments and tamper with FOSS code.

Cybersecurity 64

Cybersecurity VPN Ransomware Software 64

CyberSecurity Insiders

JUNE 20, 2023

NGFWs boast critical security features such as intrusion prevention, VPN, anti-virus, and encrypted web traffic inspection. They provide centralized visibility, reduce risk, and relieve the administrative burden on your tech teams.

Firewall 76

Firewall Network Security Architecture Digital transformation 76

McAfee

AUGUST 23, 2020

Remote users and branch offices were logically connected to this central network via technologies like VPN, MPLS, and leased lines, so the secure network perimeter could be maintained. Due to risk of losing security visibility and control, many organizations have refused to allow “direct-to-cloud” re-architecting.

Architecture 85

Architecture Digital transformation Internet Internet 85

NopSec

MAY 1, 2024

With all these distractions security researchers still found time to inform the public that software can introduce risk. This month we dive into a trio of critical vulnerabilities across a broad spectrum of products including SSL VPNs, email clients, and web server load balancers. All good stuff.

Firewall 59

Firewall VPN Software Authentication 59

McAfee

JUNE 22, 2020

However, the traditional SWG could only play this role if it was the chokepoint for all internet traffic, sitting at the edge of every corporate network perimeter and having remote users “hairpin” back through that network via VPN or MPLS links. On-Demand Webinar. Next-Generation SWG. Digital transformation demands nothing less.

Architecture 56

Architecture Internet Internet Encryption 56

NopSec

FEBRUARY 28, 2024

It turns out Ivanti is having a difficult time addressing a recent spate of critical vulnerabilities as last month’s patch resulted in the discovery of additional risk vectors. Ivanti SSL VPN CVE-2024-21888 and CVE-2024-21893 Ivanti has had a rough couple of months. CVE-2024-22107 (RCE) High Low 7.2 Systems Impacted: 15.17.1-30814.NG

Authentication 59

Authentication Accountability Passwords Risk 59

NopSec

APRIL 3, 2024

Stacked query execution greatly increases the attack surface and number of potential attack vectors, commensurately resulting in greater risk. Fortinet FortiGate SSL VPN RCE CVE-2024-21762 I think SSL VPN RCE may be my favorite combination of acronyms. Severity Complexity CVSS Score Critical Low 9.8 Systems Impacted: 7.2.0

VPN 45

VPN Authentication Architecture Software 45

NetSpi Executives

APRIL 27, 2024

The following checklist of ransomware prevention best practices can help you to minimize the risk of ransomware: Reduce the attack surface presented by internet-facing systems, applications, and clouds. Ensure that alert levels trigger an effective response for high-risk behavior associated with high-fidelity detections.

Ransomware 52

Ransomware Cyber Insurance Backups Insurance 52

Anton on Security

APRIL 28, 2022

I recently did this fun SANS webinar titled “Anton Chuvakin Discusses “20 Years of SIEM?—?What’s What’s Next?”” (the seemingly self-centered title was suggested by CardinalOps who organized the webinar). As it is common for SANS webinars , we got a lot of great questions that I feel like re-answering here for posterity.

Threat Detection 189

Threat Detection Technology VPN Architecture 189

Webroot

OCTOBER 31, 2024

Steam the Webinar on demand HERE As we look back on the cybersecurity landscape of 2024, it’s clear that the world of digital threats continues to evolve at an alarming pace in parallel with AI. Use Virtual Private Networks (VPNs): Employ a reliable VPN service, especially when using public Wi-Fi networks.

Malware 109

Malware Ransomware Passwords Healthcare 109

McAfee

MARCH 5, 2021

Costly Infrastructure – MPLS connections, VPN concentrators, and huge centralized network security infrastructure represent major investments with significant operational expense. Live Webinar. The fact that multiple security solutions typically operate in distinct siloes compounds management effort and costs. Thursday, March 18, 2020.

Digital transformation 102

Digital transformation Architecture VPN Internet 102

Duo's Security Blog

JANUARY 28, 2022

The requirements suggest taking an iterative approach: “Agencies must identify at least one internal-facing FISMA Moderate application and make it fully operational and accessible over the public internet” and “without relying on a virtual private network (VPN) or other network tunnel.” What’s Next?

Authentication 52

Authentication Government DNS Encryption 52