Last week Google discovered a zero-day vulnerability in Chrome that the Google Threat Analysis Group determined was being actively exploited in the wild. The vulnerability, tracked as CVE-2019-5786, resides in the web browsing software and impacts al...
Forum Posts
Now Facebook and Google Suite users can use a security key to authenticate and verify their identities during login, as reported by Threatpost and TechCrunch. As a secure method of two-factor authentication, security keys are physical hardware tokens...
GitHub PowerShell/Win32-OpenSSH Win32 port of OpenSSH. Contribute to PowerShell/Win32-OpenSSH development by creating an account on GitHub. So with Powershell fully endorsing SSH server in the n...
Phishing attacks have evolved to the point where there are now full-fledged tool suites that are available to bad guys. The latest iteration of such a toolkit is Modlishka. In this new blog, Duo Advisory CISO Dave Lewis comments on the state of phish...
Duo Software Engineer Suby Raman authored a new guide which discusses how the increasingly-popular WebAuthn API can be utilized to solve current problems with passwords, provides an overview of how it can be implemented, as well as code samples for r...
The delivered Duo iframes are nice, but they have a fixed height for content that varies widely in height. It has been a point of confusion for end users and we have found it difficult to find a goldilocks height that is not too short or too tall. Th...
The UK’s National Cyber Security Centre (NCSC) has published a series of guidance notes for UK enterprises on how to mitigate cyber security risks. This guidance relates to multi-factor authentication (MFA) when using online services–MFA will become ...
In the third installment of their Twitter bot analysis, Duo Labs’ Olabode Anise and Jordan Wright examine amplification bots. Anise and Wright describe how the bots can be identified using a simple formula. Read it here.
We are pleased to announce the forthcoming release of offline multi-factor authentication for Windows! The feature, which has been in public beta since July, is planned for an October release for Duo MFA, Duo Access, and Duo Beyond. You can learn abo...
Hi All, Hi there. I’m testing out the duo insight product and it seems that google is marking everything from the domain name collaborate-signin.com as a phishing attempt. I have added the IP address and domain name to the whitelist as per these ins...
Over the last few months, Duo Labs has been researching the security of Apple’s Device Enrollment Program (DEP). In this research, Duo Labs discovered an authentication weakness in DEP, used by many organizations to automatically enroll devices in th...
This new blog by Duo Regional Vice President, Federal Dean Scontras explains how the government has led the way on previous cybersecurity trends–but now, the industry is leading the way on zero trust and the government has to figure out how to fly th...
Following up on yesterday’s history of biometric authentication, Duo Senior Product Manager Steve Won is back with a blog post explaining WebAuthn. Steve explains the biometric authentication system as a triad of hardware, platform, and open standard...
This new blog by Duo Senior Product Manager Steve Won covers (as you may infer from the title) the history of biometric authentication. Steve goes over the past five years of biometric auth for both mobile devices and laptops, starting with the iPhon...
Check out this new blog by Duo Information Security Journalist Thu Pham that describes a Duo-sponsored debate that took place at Black Hat 2018. It covered topics like defense vs. offense, “security marketing”, and more. Read the blog here or watch t...
