Other Topics - Duo Security

Last week, Shadow Brokers released a cache of hacking tools that can be used to compromise firewall/routing hardware. The exploits affect Cisco, Fortinet, WatchGuard, and Juniper. These tools are supposedly linked to Equation Group, a hacking group t...

In a post today on the Duo Blog, Thu Pham shared some thoughts on what we consider to be the three major threat areas to organizations today when it comes to the most prevalent causes of breaches: users, devices and access to applications. What do yo...

Earlier this week, we released a new video on how to install Duo protection for WordPress. The installation process takes less than four minutes. We would love to get your feedback on the presentation, format, and style of this video (and all of our ...

Duo recently released a tool called Duo Insight that lets organizations run effective mock phishing campaigns against their employees for free. Since our initial launch, we’ve seen hundreds of organizations use Duo Insight to gain visibility into the...

Here is an excellent paper from Charlie Miller and Chris Valasek that outlines their work on hacking the CAN bus on an automobile. http://illmatics.com/can%20message%20injection.pdf

For years, many in the security industry operated under the assumption that breaches were inevitable - and our only option for breach mitigation is getting better and faster at detection, after they’ve already compromised us. The number of breaches a...

Google is releasing an update for GMail users that helps identify if a message is authenticated or not. Yet another step in the right direction to battle Phishing. https://threatpost.com/new-gmail-alerts-warn-of-unauthenticated-senders/119839/

This is a great article that outlines why things like “backdoors” or “golden keys” are a horrible idea. Key material needs to be protected but its never as simple as one would think and one mistake can become a disaster. theregister....

The set of Android vulnerabilities known as QuadRoot has been making the rounds on many media outlets. In today’s Duo Blog post, Olabode Anise shares our thoughts on the vulns, Google’s response, and a grounded perspective on some of the scary (and n...

Interesting article about the popular show Mr. Robot. Well, popular amongst security folk especially, including Duo Labs’ Kyle Lady, who is quoted extensively. Thought folks here might find it interesting. https://www.yahoo.com/tech/behind-scenes-loo...

Hi. We’re using Duo on an increasing basis, so finally we start to have enough usage to stimulate the occasional interesting or difficult problem (from the end-user perspective). E.g. right now we have three users experiencing an inability to use th...

If you are a current Duo Enterprise Edition customer, you are already on the right path to protecting your organization by implementing two-factor authentication. However, as new threats arise everyday, organizations understand that there is now a ne...

Earlier this summer, a phishing campaign hit many lawyers nationwide. The emails pretended to be from various state bar associations, claiming past due invoices and urgent bar-related information. The email copy contained links to malware and some in...

The UK’s National Crime Agency (NCA) has reported that, for the first time, computer-related crime and misuse has surpassed all other crime types. Fifty-three percent of cyber crime is now attributed to cyber-enabled fraud and “computer misuse,” acco...

The U.S. Department of Health and Human Services (HHS) recently released new Health Insurance Portability and Accountability Act (HIPAA) guidance on dealing with ransomware for healthcare entities and business associates. The new information is espec...