Other Topics - Duo Security

This new blog by Duo R&D Engineer Pepijn Bruienne covers updating Apple firmware, and how it can be less visible than patching software - it may not be something that is monitored in config management systems to the same extent software patching is. ...

Last Friday night at 11:42pm, emergency sirens rang out across Dallas County for over an hour. Hearing these “tornado sirens” is not uncommon, but this time was different: there was no storm – the siren emergency system had been hacked. Learn more ab...

One of the largest sustained global cyber espionage campaigns is targeting managed IT service providers (MSPs) in order to gain access to MSP customer networks, known as Operation Cloud Hopper, according to a report by PricewaterhouseCoopers (PwC) an...

Recently, Microsoft patched a vulnerability that could be used in phishing attacks to direct users to malicious websites, known as CVE-2017-0022. This is one of three that have been exploited by attackers in the wild since last year. The security upd...

When you’re trying to parlay a multi-factor authentication (MFA) product into a solution that complies with current requirements and stays ahead of future ones, it’s hard to tell which way the ship is sailing — especially when you run up against part...

This is the third in Wendy Nather’s blog series on BeyondCorp - all about setting up the access proxy policies. In this blog, she lists the different types of access policies to consider: Warning - strongly recommending or requiring action at some po...

Duo’s Information Security Journalist Thu Pham attended a talk last week featuring prominent investigative journalists Bastian Obermayer and Laurent Richard. Topics covered include an inside perspective on the precautions taken during the Panama Pape...

Hello! Earlier this week we published a new how-to video for installing Duo protection for Pulse Connect Secure SSL VPNs. This integration has been around for a while but we haven’t had a video for it until now. You can watch the video on the Documen...

We’ve compiled some best practices for maintaining trusted access with Duo while traveling. Designed for end-users, this guide includes advice sourced from our Duo Labs research team on authentication methods, what to do about a lost or stolen device...

The Center for Internet Security’s (CIS) Security Controls is a set of best practices for preventing cyber attacks, developed and validated by leading experts around the world. One of the top controls includes Inventory of Authorized and Unauthorized...

Today, Duo signed a joint letter with Rapid 7, Electronic Frontier Foundation, Center for Democracy & Technology, Global Cyber Alliance, Bugcrowd along with many other companies and individual security researchers in response to the US Department of ...

In honor of Women’s History Month, here are the wise words of a few women making history at Duo. All five were asked: What advice would you give yourself, years ago?What advice do you have for other women in tech?What has your experience been like at...

Check out the third blog in Duo Principal Security Strategist Wendy Nather’s series on BeyondCorp, covering: What “Trusted” really means - checkpoints like authentication factors and conditions placed on the deviceWhat “Managed” means and the differe...

To help raise awareness and honor those pushing ahead in the Information Security field, Duo’s Women in Security Awards have been awarded to two winners in the industry and academia. See the winners and read interviews with them here: https://duo.com...