Security news that informs and inspires

All Articles

2244 articles:

Pegasus, My Little Pony of Doom: An Analysis of iOS Vulnerabilities

Find out more about the latest three vulnerabilities affecting iOS devices, and how many enterprise endpoints and phones are susceptible to these exploits.

Pegasus, Trident

Android Phones: Nexus Wins for Security Updates

We at Duo Labs wanted to know if there is a difference between Nexus phones and other Android phones as it relates to security posture. Here are some of the key findings from our analysis:

Android, Mobile

USENIX Annual Technical Conference (ATC) 2016: The Best and Brightest Security Talks

A Duo Labs review of the USENIX Annual Technical Conference (ATC) 2016 in Denver, Colorado and the most interesting security talks on data deduplication, Blockstack, RC4 attacks and causal profiling.

More Than Half of Android Phones Vulnerable to Encryption Bypass Attacks

The security research team at Duo Security, Duo Labs analyzed our dataset of Android phones to find out how many were vulnerable to the latest Android encryption bypass attacks, patched in the May 2016 update.

Android, Vulnerability

That Big Symantec Antivirus Bug

A Duo Labs analysis of the recent critical vulnerability found in Symantec’s Antivirus Decomposer engine, used in Symantec Endpoint Protection and other Symantec and Norton security products, and discovered by Tavis Ormandy.

Vulnerability

Thirty Percent of Android Devices Susceptible to 24 Critical Vulnerabilities

It has been nine months since Google began these monthly updates, and we at Duo Labs are interested in how this change in security policy has impacted the masses. The following were some of the key findings from our data analysis...

OEM Laptop Security Shootout

A Security Analysis of Signature Edition Laptops

Are Signature Edition laptops really more secure than other laptops? Duo's security research team, Duo Labs compared Signature Edition models with others to find out the answer.

Out-of-Box Exploitation: A Security Analysis of OEM Updaters

Today, Duo Labs is publishing our take on the OOBE; Out-of-Box Exploitation: A Security Analysis of OEM Updaters. OEM software is making us vulnerable and invading our privacy - with that in mind, Duo Labs decided to dig in to see how ugly things can get.

OEM Security, Dell Security, Out of Box Software, Labs Research

Duo Labs Answers: Is Public Wi-Fi Safe?

From coffee shops to airports to hotels and work conferences, free public Wi-Fi is everywhere, easy and accessible. But is it safe to use?

Wi Fi Security, 2fa

Bring Your Own Dilemma: OEM Laptops and Windows 10 Security

Security research team, Duo Labs, dissects OEM laptops to find out how secure they are - learn more about the privacy and security issues they found with laptop default settings, data collection and more.

DROWN Provides Another Reminder to Disable SSLv2 (and 3, while you’re at it)

A newly discovered vulnerability in crypto protocols breaks connections and reminds us all that it's long past time to move on from SSLv2.

SSL, SSL Security, Openssl, Vulnerability

OpenSSL Provides Another Reminder to Disable SSLv2 (and 3, while you’re at it)

A newly discovered vulnerability in OpenSSL reveals private keys and reminds us all that it's long past time to move on from SSLv2.

SSL, SSL Security, Openssl, Vulnerability

Critical Vulnerability Affecting Glibc: Patch Immediately

The Glibc Project has announced a critical vulnerability affecting systems using the glibc DNS client-side resolver, that could, under certain conditions, lead to remote code execution on a system using glibc.

Glibc, Linux Security, Vulnerability

Microsoft Drops Support for Internet Explorer: Just How Big of Deal is This?

Microsoft will soon drop support for Internet Explorer versions 8, 9 and 10 - that means no more security updates. We took a look at our user data to determine the impact on IE users. Here’s what we found…