The 2018 Duo Trusted Access Report has just been released! This report asks and answers “what does work look like today - and what are the security risks?” To investigate this question, our Duo Labs research and development team dove into our vast am...
Forum Posts
Resolved! Duo at Oktane18 conference
Just wondering if Duo has representatives at Oktane 18 conference? We use Okta and duo and were wondering if there are any enhancements of the integration. Thanks,
To secure BYOD devices, security practitioners have turned to mobile device management (MDM) solutions. But MDMs have their own host of problems. Duo Beyond was launched last year as an alternative to MDM. Check out our new blog post, written by Duo...
Stories frequently come out about a freshly discovered S3 bucket on Amazon Web Services (AWS) accidentally exposing sensitive information. While some of these resources are made public on purpose, it’s possible that misconfigurations can lead to unex...
Resolved! Duo + PCI 3.2 = I Believe not! :(
Guys, I have a problem implementing the Duo. I’m going through a PCI 3.2 certification process, where the MFA process has changed. According to PCI 3.2 the MFA should now respect some points such as: The authentication mechanisms used for MFA should...
The General Data Protection Regulation (GDPR) is a sweeping new data privacy law that will be enforced in the European Union (EU) later this month. Broadly defined, it applies to any organization that processes personal data of EU residents, regardle...
We’re pleased to announce the general availability of Single Sign-On (SSO) support for the Admin Panel. Customers can now utilize SAML Identity Providers (IdP) like Azure AD, ADFS, Duo Access Gateway, etc. to federate access to the Duo Admin Panel. I...
Duo’s new integration with Akamai Enterprise Application Access offers customers a more secure, user-friendly alternative to VPNs for remote access. Check out this blog post by Vishal Gupta, Technology Partnerships Manager at Duo, for more on securin...
Today we are officially launching the Duo Technology Partner Program! This program will help us provide even faster and easier deployments for a larger number of applications. It also enables us to address new customer use cases as Duo grows beyond a...
The latest Internet Security Threat Report (ISTR) from Symantec covers the past year in review when it comes to financial and banking security trends, the most common malware infection vectors, mobile malware and ransomware trends and much more. If y...
A long time ago, in a galaxy far, far away, a man named Mikhail wanted to dump the firmware of a microcontroller. He’d done this many times before with many other microcontrollers, but on this day, the microcontroller wasn’t willing to cooperate. Mik...
Is there a plan for FedRamp certification?
A new open-source tool from Duo called CloudTracker, now available on Github, analyzes Amazon Web Services (AWS) CloudTrail logs to ensure the principle of least privileges for Identity and Access Management (IAM) users. The tool ensures that IAM pri...
Hi, I receive E-Mail notifications by Duo Security that my Telephony credits are running low. (I have used 2FA via SMS; meanwhile I have chosen a different system.) I do not want to receive these E-Mails anymore. But when I want to login with my pass...
This blog post by Duo Senior AppSec Engineer Kelby Ludwig describes a new vulnerability class that affects SAML-based single sign-on (SSO) systems. This vulnerability can allow an attacker with authenticated access to trick SAML systems into authenti...
