Other Topics - Duo Security

When did our tech diet get out of hand? We started to learn more and more about different threats, and then about the latest security tool to fix each of them, and we just had to have them all (insert Pokémon Go joke here). So we dutifully kept addin...

Here’s a good thing: This morning, Sony quietly added two-step verification to the PlayStation Network, allowing users to add an extra layer of security to their PS4, PS3, and Vita accounts. Nice. Check out Kotaku’s full write-up here: ...

It seems three fairly nasty bugs that work very nicely (well, more evil than nice) together allow for complete compromise of your iOS device. We recommend you patch now, then read this new blog post to understand why we said to do it. ...

Mikhail and Jono talk about Duo in Space and some NIST stuff regarding SMS on the latest On The Wire podcast episode. Pindrop – 25 Aug 16 On the Wire Podcast: Jon Oberheide and Mikhail Davidov | Pindrop It’s not often th...

Last week, Shadow Brokers released a cache of hacking tools that can be used to compromise firewall/routing hardware. The exploits affect Cisco, Fortinet, WatchGuard, and Juniper. These tools are supposedly linked to Equation Group, a hacking group t...

In a post today on the Duo Blog, Thu Pham shared some thoughts on what we consider to be the three major threat areas to organizations today when it comes to the most prevalent causes of breaches: users, devices and access to applications. What do yo...

Earlier this week, we released a new video on how to install Duo protection for WordPress. The installation process takes less than four minutes. We would love to get your feedback on the presentation, format, and style of this video (and all of our ...

Duo recently released a tool called Duo Insight that lets organizations run effective mock phishing campaigns against their employees for free. Since our initial launch, we’ve seen hundreds of organizations use Duo Insight to gain visibility into the...

Here is an excellent paper from Charlie Miller and Chris Valasek that outlines their work on hacking the CAN bus on an automobile. http://illmatics.com/can%20message%20injection.pdf

For years, many in the security industry operated under the assumption that breaches were inevitable - and our only option for breach mitigation is getting better and faster at detection, after they’ve already compromised us. The number of breaches a...

Google is releasing an update for GMail users that helps identify if a message is authenticated or not. Yet another step in the right direction to battle Phishing. https://threatpost.com/new-gmail-alerts-warn-of-unauthenticated-senders/119839/

This is a great article that outlines why things like “backdoors” or “golden keys” are a horrible idea. Key material needs to be protected but its never as simple as one would think and one mistake can become a disaster. theregister....

The set of Android vulnerabilities known as QuadRoot has been making the rounds on many media outlets. In today’s Duo Blog post, Olabode Anise shares our thoughts on the vulns, Google’s response, and a grounded perspective on some of the scary (and n...

Interesting article about the popular show Mr. Robot. Well, popular amongst security folk especially, including Duo Labs’ Kyle Lady, who is quoted extensively. Thought folks here might find it interesting. https://www.yahoo.com/tech/behind-scenes-loo...

Hi. We’re using Duo on an increasing basis, so finally we start to have enough usage to stimulate the occasional interesting or difficult problem (from the end-user perspective). E.g. right now we have three users experiencing an inability to use th...