Other Topics - Duo Security

A new wormlike malware has spread from its initial appearance in Ukraine to 64 different countries, disrupting shipping, real estate, supply chain companies, and more. Reminiscent of the WannaCry ransomware outbreak two months ago, there has been deb...

A healthcare cybersecurity task force comprised of several members of the information security industry and U.S. agencies released a detailed and prescriptive 96-page report (PDF) on improving security in the healthcare industry earlier this month. I...

Hey there. Duo Labs does weird research from time to time. The wonderful world of weird known as the Internet of Things seems like a fun match for us. So we did a bit of digging, or should I say drilling into the topic using a power drill with Blueto...

New, harder-to-detect phishing methods are being put to use, tricking users into giving away their credentials. Attackers have elevated their game by using HTTPS and including authentic-looking web forms to gain usernames and passwords, among other s...

The 2017 Duo Trusted Access report reveals the different industries, locations and devices potentially at risk, along with our security recommendations on how to protect your organization. To shed light on who’s at risk, Duo Labs has collected and an...

Hello. Accessibility has become an important issue here at NYU. I recently inquired with Duo support on this topic, especially as a year ago Duo posted that work was underway toward WCAG 2.0 compliance. Support indicated that the Duo admin panel ...

After the large-scale ransomware attack on healthcare systems last Friday, the Department of Health and Human Services (HHS) is urging healthcare organizations to follow Health Insurance Portability and Accountability Act (HIPAA) guidelines for prote...

We’d love for you to take part in a 25-minute remote usability test. All you need is a PC or Mac, and a smartphone. We’ll even provide an Amazon gift card in return! If you or someone you know would like to be a tester, please email uxtest@duo.com. W...

Kyle Lady, Duo’s Senior R&D Engineer, wrote up a blog about Duo Labs’ analysis of the Anti Public Combo List. This is over 500 million usernames/passwords aggregated from data breaches/password dumps. Most accounts were consumer accounts - nearly hal...

We want to make it as easy as possible to get end-users up and running with Duo. We’re looking for any information on how you informed your user bases about what Duo is and how they will interact with it. https://guide.duo.com is publicly available b...

Yesterday, a Gmail phishing attack leveraging OAuth spread quickly to multiple users. There are a number of features that you need to be aware of that made this attack incredibly successful. Read more about the details of the attack and how to protec...

Stolen RDP logins from education, healthcare and government organizations are particularly in demand on the dark web, according to a recent analysis from Flashpoint. In many instances these credentials are brute-forced, then put up for sale on a larg...

In November, we filed Freedom of Information (FoI) requests to 70 universities throughout the U.K., surveying them about their phishing experiences. In this new blog, Jordan Wright of Duo Labs discusses the results, which indicate that phishing conti...

Our new Liftoff guide will walk you through the key deployment stages when rolling out Duo, along with our best practices and key resources for each step of the way. Our aim is to make your Duo deployment as easy and as successful as possible. The gu...

Duo signed a joint letter penned by Rapid7 recommending the addition of a vulnerability disclosure and handling process in the National Institute of Standard and Technology’s (NIST) cybersecurity framework. Many other security companies and organizat...