This blog post describes a new vulnerability class that affects SAML-based single sign-on (SSO) systems. This vulnerability can allow an attacker with authenticated access to trick SAML systems into authenticating as a different user without knowledge of the victim user’s password.
Today we are pleased to announce a new open-source tool from Duo Security for visualizing Amazon Web Services (AWS) cloud environments!
The Duo Labs team analyzes the Bluetooth security of several different personal protection devices to shed light on how secure these devices are, and if they can be tracked remotely or reveal identifying information.
By juggling different factors to rebalance the risk, you’re employing adaptive authentication: adapting to the current estimated level of risk at the time of login. If you think of authentication factors as being like a hand of cards, you can play the cards that you think are appropriate at each point in your game.
Updated PCI DSS guidelines require multi-factor authentication (MFA) for all remote access - see how the Payments Security Compliance (PSC) explains how Duo's MFA can help you protect access to meet compliance.
Learn about Web Authentication, a credential management API built into popular browsers, that allows users to authentication easily, with strong encryption.
Duo has added support for Face ID and compatibility with iPhone X with the release of version 3.19 of Duo Mobile, available since November 3.
Duo’s Production Engineering team provides an overview of documentation gaps in AWS's suggested policies for enforcing multi-factor authentication - here's how to mitigate these gaps to help safeguard your users.
Learn about the hurdles of MFA adoption, as well as the benefits of MFA, from the experiences of multiple Duo users in various industries.
In a technical paper released today, Duo Labs details the results of a month-long experiment in which we hunted and analyzed over 3,200 unique phishing kits.
