Other Topics - Duo Security

Hi there! A lot of the Duo Labs team were in Las Vegas for BSidesLV, Black Hat, and DEF CON, and as a part of my visit I took pictures of rather poor examples of OPSEC. I gathered about half the pictures into a short blog where I talk about OPSEC dur...

This blog published yesterday by Duo’s Ian Sharpe covers how to implement technical, Duo policy-driven controls to support and secure a bring-your-own-device (BYOD) policy at an organization. Check it out on the Duo blog here.

Three years ago, Duo’s Information Security Journalist, Thu Pham, wrote about the different criteria to consider when choosing a modern two-factor authentication (2FA) solution, in What to Look for in a Modern Two-Factor Authentication Solution. But ...

Technology moves fast - the guidelines for securing “digital identities” is already four years old; old enough to be replaced by the National Institute of Science and Technology (NIST). The new, final Special Publication (SP) 800-63-3 was released at...

Hi I’m fresh from Clef so still learning about Duo. Is there any point to having Limit Login Attempts as well as Duo (WordPress)

In part 2 of our series on moving beyond the perimeter (read part 1 here), Duo’s Principal Security Strategist Wendy Nather explains how you can build a new security model within your organization. She covers: Enrolling users/endpoints into inventori...

In Duo’s latest white paper, Principal Security Strategist Wendy Nather explains the theory behind Google’s BeyondCorp security model, the different components required and the overall security architecture. This white paper is part 1 of 2 in the Mov...

A new wormlike malware has spread from its initial appearance in Ukraine to 64 different countries, disrupting shipping, real estate, supply chain companies, and more. Reminiscent of the WannaCry ransomware outbreak two months ago, there has been deb...

A healthcare cybersecurity task force comprised of several members of the information security industry and U.S. agencies released a detailed and prescriptive 96-page report (PDF) on improving security in the healthcare industry earlier this month. I...

Hey there. Duo Labs does weird research from time to time. The wonderful world of weird known as the Internet of Things seems like a fun match for us. So we did a bit of digging, or should I say drilling into the topic using a power drill with Blueto...

New, harder-to-detect phishing methods are being put to use, tricking users into giving away their credentials. Attackers have elevated their game by using HTTPS and including authentic-looking web forms to gain usernames and passwords, among other s...

The 2017 Duo Trusted Access report reveals the different industries, locations and devices potentially at risk, along with our security recommendations on how to protect your organization. To shed light on who’s at risk, Duo Labs has collected and an...

Hello. Accessibility has become an important issue here at NYU. I recently inquired with Duo support on this topic, especially as a year ago Duo posted that work was underway toward WCAG 2.0 compliance. Support indicated that the Duo admin panel ...

After the large-scale ransomware attack on healthcare systems last Friday, the Department of Health and Human Services (HHS) is urging healthcare organizations to follow Health Insurance Portability and Accountability Act (HIPAA) guidelines for prote...

We’d love for you to take part in a 25-minute remote usability test. All you need is a PC or Mac, and a smartphone. We’ll even provide an Amazon gift card in return! If you or someone you know would like to be a tester, please email uxtest@duo.com. W...