Other Topics - Duo Security

Today, Microsoft released a security update that patches a critical Windows vulnerability affecting all versions of Windows from Visa to Windows 10. This flaw paired with another recent Flash bug allows attackers to gain control of browsers, elevate ...

Hello DUO Community, I was wondering if DUO and/or the Community had thoughts regarding the claim by AgileBits that they have implements a Better than two-factor™ scheme? https://support.1password.com/understanding-account-key/#better-than-two-facto...

The new National Cyber Security Strategy (PDF) released by The UK Chancellor Philip Hammond outlines the government’s plan to protect their economy and privacy by securing their technology, data and networks from threats and cyber attacks. According ...

We posted a thing about Duo in Space last week, about halfway through a series of blogs talking about various aspects of Labs’ Mikhail Davidov’s cool project. Anyway, the entire series of blogs are up, and if you are into space, gadgets, and creative...

On November 2nd, researchers from Black Hills Information Security disclosed a technique for bypassing multi-factor authentication on Outlook Web Access. To be clear, this is not a vulnerability or defect in Duo’s service, but rather, it is a defect ...

As a huge podcast fan and fledgling security nerd, I’m wondering if anyone has recommendations for series or episodes they especially like. I love Radiolab the most, so Darkode is my biggest must-listen so far. What else should I be enjoying/learning...

Google reported two critical zero-day vulnerabilities 10 days ago that are being exploited in the wild. The software bugs affect Adobe’s Flash and Microsoft’s Windows 10. While Adobe released an emergency patch for the Flash bug, 5 days after it was ...

We’ve just released the second version of The 2016 Duo Trusted Access Report: Microsoft Edition, a closer look at the security health of millions of devices running Microsoft software and accessing Microsoft applications. In this report, we cover: Ho...

CSO Online Google discloses Windows zero-day, Microsoft argues disclosure ethics On Monday, Google disclosed a zero-day vulnerability in Windows, which if exploited will enable an attacker to use it as a security sandbox...

Back in August, Duo made the first-ever attempt at two-factor authentication from space using a weather balloon, a Raspberry Pi, a cellphone and a robo finger. Get a glimpse into how they chose their video platform, tech and more (including the entir...

Check out the Duo in Space website! Recently updated with videos and all kinds of information. Also check out part one and part two of a whole series of blogs from Labs’ Mikhail Davidov on what he went through to make it happen.

In the past few months, we’ve been working on making our Duo Authentication Prompt more accessible to our users. We’re aligning to the Web Content Accessibility Guidelines (WCAG) 2.0, the most widely used set of standards for creating accessible webs...

Hi All, At Duo, we’re always pushing to adopt new security capabilities that are emerging in major platforms. We recently had the chance to partner with Google on a new Chrome OS security capability called Verified Access. We’re using this today to...

Duo Labs recently looked at some Chinese cellphones we just happened to run across, and we’d thought it would be cool to find some evil backdoors in them. We quickly discovered that between the three of us working on this we had maybe ten different i...

In August, some of the Labs team chatted on an AMA on Reddit. One of the most common questions they got was, “How did you get started in infosec, and how do I get started?” The team’s most common answer was “Hacking video games!”, which drew some muc...