7 Ways Cybercriminals Steal or Defeat Login Credentials
To understand how to protect your data and accounts, it's helpful to know common ways in which your passwords and credentials could be stolen and used against you.
How We Bypassed Google’s Two-Step Verification
Learn how attackers bypass Google's 2-step verification, reset users' master passwords & gain full account control by capturing users' app-specific passwords.
CSOs: Are You Prepared for the Next Security Breach?
While it’s easy to understand how such major organizations might be specifically targeted, today, every organization on the Internet is as much a target of chance, as a target of choice.
Top 7 Reasons Companies Don’t Use Two-Factor Authentication
In the spirit of year-end reviewing and wrapping up, we've been conferring with the ghosts of security trends past, present, and future. One of the most notable trends we've seen is that 2012 was the year in which two-factor authentication really broke out of the security community. Learn more
Black Friday Tips for Keeping Your Data Safe When Shopping Online
So what can a security minded online shopper do, other than giving up the convenience and selection of online shopping? Here are a few of our best tips for protecting your online identity from your online shopping when strong authentication options aren’t available.
RSA-Proofing Our Duo Push Two-Factor Authentication
The topic of trust is something near and dear to us at Duo, as we've designed our platform from the ground-up to place as minimal trust in our service as necessary and are continually working to further host-proof our service.
Breaking Down the Probable LastPass Breach
In case you haven't heard, LastPass, everyone's favorite browser-based password manager, posted an unsettling blog post yesterday detailing an anomalous event that occurred Tuesday morning on their infrastructure.
Open Season On Open Source?
Massive, Internet-scale compromise has taken many forms over the years. But it's probably never been easier than today.
Brief Analysis of the Gawker Password Dump
We've launched a site that allows you to easily check if your username or email address was included in the Gawker password dump: http://didigetgawkered.com.