CVE-2018-16465

Missing state in Nextcloud Server prior to 14.0.0 would not enforce the use of a second factor at login if the the provider of the second factor failed to load...

Design/Logic Flaw

Missing state in Nextcloud Server prior to 14.0.0 would not enforce the use of a second factor at login if the the provider of the second factor failed to load...

CVE-2018-16465

Missing state in Nextcloud Server prior to 14.0.0 would not enforce the use of a second factor at login if the the provider of the second factor failed to load...

Second factor authentication bypassed if provider fails to load (NC-SA-2018-011)

Missing state would not enforce the use of a second factor at login if the the provider of the second factor failed to load...

Google 'Titan Security Key' Is Now On Sale For $50

Google just made its Titan Security Key available on its store for $50. First announced last month at Google Cloud Next '18 convention, Titan Security Key is a tiny USB device—similar to Yubico's YubiKey—that offers hardware-based two-factor authentication 2FA for online accounts with the highest...

Nextcloud Server Security Bypass Vulnerability (Aug 2018)

Nextcloud Server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Titan Security Keys – Google launches its own USB-based FIDO U2F Keys

At Google Cloud Next '18 convention in San Francisco, the company has introduced Titan Security Keys —a tiny USB device, similar to Yubico's YubiKey, that offers hardware-based two-factor authentication for your online accounts with the highest level of protection against phishing attacks. These...

DUO-PSA-2014-004: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2014-004 Original Publication Date: 2014-02-12 Revision Date: 2014-03-27 Status: Confirmed, Fixed Document Revision: 3 Overview Duo Security has identified an issue in which it is possible to bypass second factor authentication of multisite...

Apple Patent Links Power Cord To Password Recovery

The filing, 20120005747A1, describes a method for storing a password recover secret on a peripheral device, including a power adapter. The development would, in essence, turn power cords and other peripherals into a second factor that would make it harder for thieves to gain access to devices the...

DUO-PSA-2018-002: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2018-002 Publication Date: 2018-05-23 Revision Date: 2018-05-23 Status: Confirmed, Fixed Document Revision: 1 Overview Duo has identified and fixed an issue with the Duo administrative panel. This issue could have allowed for a second-factor bypa...

DUO-PSA-2017-002: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2017-002 Publication Date: 2017-05-31 Revision Date: 2017-05-31 Status: Confirmed, Fixed Document Revision: 1 Overview Duo Security has identified an issue in duounix, which, under certain uncommon configurations, could enable attackers to bypass...

DUO-PSA-2018-002: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2018-002 Publication Date: 2018-05-23 Revision Date: 2018-05-23 Status: Confirmed, Fixed Document Revision: 1 Overview Duo has identified and fixed an issue with the Duo administrative panel. This issue could have allowed for a second-factor bypa...

DUO-PSA-2016-002: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2016-002 Publication Date: 2016-12-14 Revision Date: 2016-12-21 Status: Confirmed, Fixed Document Revision: 2 Overview Duo Security has identified an issue in the Duo Authentication Proxy which, under certain uncommon configurations, could enable...

DUO-PSA-2016-002: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2016-002 Publication Date: 2016-12-14 Revision Date: 2016-12-21 Status: Confirmed, Fixed Document Revision: 2 Overview Duo Security has identified an issue in the Duo Authentication Proxy which, under certain uncommon configurations, could enable...