Security News

Ongoing Duo outage causes Azure Auth authentication errors
2023-08-21 16:26

Cisco-owned multi-factor authentication provider Duo Security is investigating an ongoing outage that has been causing authentication failures and errors starting three hours ago. The outage also led to Core Authentication Service issues across multiple Duo servers, triggering Azure Auth authentication errors for Azure Conditional Access integrations in a systemwide outage.

Megaupload duo will go to prison at last, but Kim Dotcom fights on…
2023-06-19 18:59

This time, the news is prison sentences for two of the main four original defendants in the infamous Megaupload saga. Megaupload's larger-than-life founder, who these days answers to the name Kim Dotcom, certainly likes to show off.

Microsoft bets on hardware-software duo for Windows 11 security
2022-09-27 11:32

The changes in the latest release of the security configuration baseline touch on a range of areas, including hardware - which Microsoft has increasingly emphasized in recent years - drivers and printers as well as protections against credential theft and account lookout. The feature is part of a larger push Microsoft has been making for several years to more tightly integrate hardware and software security capabilities.

Duo Helps Organizations with ACSC Mitigation Strategies
2022-09-01 00:00

Cyberattacks in Australia continue to rise year after year. Over the 2020-21 financial year, Australia saw a 13% increase in reported cybercrime.

Duo Helps Organisations with ACSC Mitigation Strategies
2022-09-01 00:00

Cyberattacks in Australia continue to rise year after year. Over the 2020-21 financial year, Australia saw a 13% increase in reported cybercrime.

Duo Passwordless: Expert Tips and Your Questions Answered
2022-09-01 00:00

How passwordless authentication can benefit organizations of every size, not just enterprises. The technical requirements for Duo's Passwordless solution, and what use cases are supported.

If your hair isn't already gray, 2022's security threats will get it there, warn infosec duo
2021-10-28 07:25

FireEye and McAfee, whose business models center around charging enterprises money to protect their networks from cyber-threats, issued a joint report this week predicting next year you'll see an increase in cyber-threats, particularly those against enterprise networks and the staff who run them. Nation states will "Increase their offensive operations by leveraging cybercriminals." as senior principal McAfee engineer Christiaan Beek theorized, citing the example of US indictments against four Chinese nationals who were allegedly running front companies on behalf of Beijing.

Cisco introduces infrastructure agnostic, passwordless authentication by Duo
2021-04-01 01:45

Cisco Secure unveiled the future of simple and effective security with infrastructure agnostic, passwordless authentication by Duo. Integrated seamlessly into the existing Duo authentication experience used by more than 25,000 organizations globally, Duo passwordless authentication will enable enterprise users to skip the password and securely log into cloud applications via security keys or biometrics built into modern laptops and smartphones.

Mom & Daughter Duo Hack Homecoming Crown
2021-03-16 20:27

A 17-year-old high school senior along with her mother, Laura Rose Carroll, were arrested this week, charged with accessing student records in a fraudulent attempt to rig her school's Homecoming Queen election. The same district where her daughter attended Tate High School, the Washington Post reported.

How the SolarWinds Hackers Bypassed Duo’s Multi-Factor Authentication
2020-12-15 20:13

Toward the end of the second incident that Volexity worked involving Dark Halo, the actor was observed accessing the e-mail account of a user via OWA. This was unexpected for a few reasons, not least of which was the targeted mailbox was protected by MFA. Logs from the Exchange server showed that the attacker provided username and password authentication like normal but were not challenged for a second factor through Duo. The logs from the Duo authentication server further showed that no attempts had been made to log into the account in question.