Announcing Duo’s Native MFA For Microsoft’s Microsoft Entra ID
Learn how Duo's native MFA for Microsoft Entra ID can help teams keep sensitive data secure as they migrate it to the cloud.
Redesigning the Duo Admin Panel
Visual consistency is more than just looking the same; it’s how we at Duo show that we care about how you experience our product - find out how our Product Design team redesigned the Duo Admin Panel to match Duo.com’s new look and feel.
Solving the Identity Crisis with Username Aliases
Now introducing Username Aliases, a new feature from Duo that helps you solve the problem of multiple usernames for each employee - available for Duo MFA, Duo Access and Duo Beyond.
NIST Update: Passphrases In, Complex Passwords Out
New NIST guidelines recommend using long passphrases instead of seemingly complex passwords - check out a summary of the new best practices for password security in NIST’s SP 800-63B.
What is Modern Two-Factor Authentication (2FA)?
Learn about the key features of modern two-factor authentication (2FA) solution, including whether it's safe, secure, and easy to use.
New Open-Source Phishing Tools: IsThisLegit and Phinn
We're excited to announce two new open-source tools designed to help administrators prevent, manage, and respond to phishing attacks against their organization - IsThisLegit and Phinn.
The Competitive Advantage of Integrating Security & Privacy into Your Business Strategy
Organizations are exploring how to gain a competitive advantage by integrating information security and privacy with their business strategy, according to a 2017 cybersecurity report from PricewaterhouseCoopers (PwC).
Gmail OAuth Phishing Goes Viral
A Gmail phishing attack leveraging OAuth spread quickly to multiple users. Learn what made this attack incredibly successful, as well as ways to protect yourself or your employees.
The macOS Phishing Easy Button: AppleScript Dangers
An attacker can send phishing dialogs to users by writing a few lines of AppleScript, effectively allowing them to steal Apple ID or local user account credentials. Here’s our technical overview of the dangers of AppleScript.
Essential Information Security Controls: Device Inventory
Learn more about the Center for Internet Security’s Security Controls. In this blog, I cover the first control, Inventory of Authorized and Unauthorized Devices in more detail.