New blog post: Gmail OAuth Phishing Goes Viral


Yesterday, a Gmail phishing attack leveraging OAuth spread quickly to multiple users. There are a number of features that you need to be aware of that made this attack incredibly successful.

Read more about the details of the attack and how to protect yourself in Thu Pham’s post here:

Were any of you or your organizations hit by the attack?


Also a good time to remind everyone that Duo Beyond and Duo Access integrate our free Insight phishing tool directly into the Duo Admin Panel. You can read more about our Phishing Campaigns tool here:

If you’re not an Access or Beyond customer (or a Duo customer at all!), you can still use our completely free Insight phishing tool here:


And finally three of Duo’s security experts are doing a live Q&A at noon EDT today!

It begins in 45 minutes here: