Duo Blog: Discover Security Insights and News

Industry News

Identity-based attacks: How attackers bypassed MFA four times in one month

Four recent incidents show why phishing-resistant authentication, session monitoring, and token binding now matter more than the login prompt itself.

May 27, 2026 7 minute read

Product & Engineering

How Duo Directory automates user lifecycle management

Learn how Duo Directory, directory sync, and custom attributes help IT teams automate onboarding, offboarding, and access control.

Scott Grebe

May 15, 2026 10 minute read

Industry News

Cisco Systems Named a Customers’ Choice in Gartner Peer Insights™ 2026 Voice of the Customer for Access Management

See why 98% of reviewers recommend Cisco Duo for access management, with a 4.8/5 rating and the only vendor placed in the Customers' Choice quadrant.

Scott Grebe

May 13, 2026 5 minute read

Product & Engineering

How to build IdP failover with backup and split strategies

Your organization can't afford a single point of failure in identity. Explore backup and split IdP architectures to maintain authentication continuity.

Sandeep Agarwal

April 27, 2026 7 minute read

AI Security

Agentic AI security: Three threats your team should know

Learn how to classify and prioritize the risks AI agents introduce to your enterprise environment using a three-category threat framework from Duo research.

Steve Leung

April 23, 2026 9 minute read

Industry News

How MSPs secure client access with Duo and Meraki

Phishing-resistant MFA blocks over 99% of identity attacks. See how Duo and Meraki help MSPs protect every tenant and reduce risk at scale.

Janet Ho

April 21, 2026 4 minute read

Product & Engineering

Why single-IdP dependency is your biggest identity risk

Most organizations rely on a single Identity Provider for every access decision. Learn why IdP concentration risk is a critical vulnerability and how to assess your exposure.

Sandeep Agarwal

April 20, 2026 7 minute read

Industry News

Your endpoint management system has an identity problem

The Stryker cyberattack didn't exploit a vulnerability. It exploited the tool designed to protect endpoints, and identity is the missing control plane.

Janet Ho

April 16, 2026 7 minute read

Industry News

Device Trust without cookies: advancing passwordless with Duo Push

Learn how device trust through Duo Desktop and Bluetooth verification eliminate cookie dependency for reliable, phishing-resistant logins.

Kyle Mills, and Lei Hung

March 26, 2026 6 minute read

Industry News

Introducing Duo Agentic Identity

Agentic AI is here. To securely unleash its potential, organizations need visibility, accountability, and governance for agents. Duo Agentic Identity provides all three.

Matt Caulfield

March 23, 2026 6 minute read

Ready to secure your organization?

Experience for yourself why Duo is one of the most trusted access management tools. Try it for free, explore editions, and connect with security experts.