As Duo's security research team, Duo Labs is dedicated to disrupting, de-risking and democratizing complex security topics and sharing their innovations with the broader community. Learn more: duo.com/labs
60 Articles Found
Duo Labs security researchers show how to bypass microcontroller interfaces used for internet of things (IoT) devices - these invasive attacks require physical access to typical microcontrollers.
Duo Labs performed an analysis of Objective-C binaries running on managed macOS endpoints in enterprise environments, using the Interactive Disassembler (IDA Pro) to perform disassembly and decompilation of the binaries.
This blog post describes a new vulnerability class that affects SAML-based single sign-on (SSO) systems. This vulnerability can allow an attacker with authenticated access to trick SAML systems into authenticating as a different user without knowledge of the victim user’s password.
The Duo Labs team analyzes the Bluetooth security of several different personal protection devices to shed light on how secure these devices are, and if they can be tracked remotely or reveal identifying information.
Duo Labs conducted a U.S.-census-representative survey to learn more about two-factor authentication (2FA) usage, how people learned about it, which technologies they’ve used as as a second factor, and more. Get the full report on our data here.