Mike leads all security research, development and operations functions at Duo. Prior to Duo, Mike was a senior member of the technical staff at CERT/CC, working on applied R&D programs for the US Department of Defense and the Intelligence Community. He has a master’s degree in information security policy and management from Carnegie Mellon University and a bachelor’s degree in economics from Michigan State University.
In the spirit of transparency, we want to provide insight into an issue with Duo Mobile's usage analytics data collection, and what we're doing to enhance our focus on privacy through future feature and product releases.
On November 2nd, researchers from Black Hills Information Security disclosed a technique for bypassing multi-factor authentication on Outlook Web Access. To be clear, this is not a vulnerability or defect in Duo’s service, but rather, it is a defect in Microsoft Exchange Web Services.
We dig deep into our data to find out how many iPhones are using built-in security, running the latest OS and hardware, and more.
Recently, the Duo Labs team analyzed the current state of security of Android devices. Our large sample includes users' personal devices used to access their employers systems and data, authenticating with Duo's two-factor authentication.
> At Duo Labs, we recently studied the state of outdated iOS devices in past article. With the recent release of iOS 9, we revisited this discussion, given the unique device-based insight our service can provide.
