IT operations

This post tackles the challenges of RDP Network Level Authentication (NLA) with Azure AD, labeled as the PKU2U nightmare, offering detailed solutions for common problems. It addresses enabling PKU2U authentication, Azure AD workplace joining, the correct Azure AD username format, and third-party application support, providing both technical insights and practical steps to mitigate these issues in Azure AD environments.

Navigate through the confusion of "the specified user name does not exist" error during RDP smartcard logon, offering insights into common misinterpretations and actionable solutions. This post breaks down error messages, suggests disabling strict KDC validation, and guides on certificate trust validation, ensuring successful authentication with practical steps and PowerShell commands.

In this article, Mathieu Morrissette from the Devolutions Security Team discusses the improvements offered by CVSS v4.0, promising more accurate, granular, and flexible vulnerability assessments.

This guide demystifies the "TrustedHosts" setting in PowerShell remoting, explaining its significance and how to configure it to avoid common errors. It offers solutions for enabling remote connections, particularly when Kerberos or HTTPS isn't used, ensuring security and connectivity for non-domain-joined machines or across different domains.

Devolutions is excited to present a guest blog post from SystoLOCK expert Roman Kuznetsov.

Unpack the dilemma between Cloud Kerberos Trust and Key Trust in Windows Hello for Business deployments. This post navigates through troubleshooting login issues, clarifying deployment types, and offering solutions for transitioning between deployment models with Group Policy and PowerShell, ensuring a smoother Windows Hello setup and operational reliability.

AI holds immense possibilities for formidable security solutions — and for malicious activities. To protect ourselves, we must bolster our core cybersecurity pillars with defensive AI.

Resolve RDP NLA issues on domain-joined devices outside the corporate network by configuring a scheduled task to fetch the Kerberos machine TGT at startup. This practical solution ensures secure, remote desktop access without compromising network security, detailed with step-by-step instructions and troubleshooting tips.

Reddit recently made headlines after it became the victim of a spear-phishing attack on February 5, 2023. What about this hack caught Devolutions' attention? The actions of a particular end user.

This article explores how Devolutions Hub Business was designed with high security standards to ensure that customer data remains secure.

Before purchasing a password management solution for your organization, it's crucial to ask a fundamental question: do you need ONLY a password manager? Surprisingly, the answer is likely to be no!

Gartner has published its 2023 edition of the top strategic trends, which are grouped into three categories: optimizing IT systems, scaling technology, and pioneering efforts.

This article describes a simple, fast, and proven process improvement program called a TRIM check, which enables businesses to meet enhanced business, security, and compliance needs.

OpenSSL released an advisory concerning two high severity vulnerabilities in the 3.x line of releases. Devolutions products are not affected by these vulnerabilities.

October is Cybersecurity Awareness Month. Launched in 2004 by the Department of Homeland Security and the National Cyber Security Alliance, the annual event...

One of the signature characteristics of the IT landscape is the sheer volume of unique terms that are used on a regular basis. Indeed, to outsiders it can seem like IT pros are speaking a completely...

The mantra for many hackers these days isn’t “go big or go home.” Instead, it’s “good things come in small packages” — because they are setting their sights on small and mid-sized businesses (SMBs).

If you have a smart home, then there is a chance that you are in fact allowing several security risks to live rent-free in your home.

We keep hearing that the cybercrime landscape is getting worse. But just how bad have things become? We scoured a variety of sources to reveal the terrifying reality of cybercrime in 2022.

Every IT pro knows that strong IT security is absolutely, categorically, and unquestionably essential.

IT pros repeatedly tell end users never to click on suspicious links. And this is a warning that should always be heeded!

Devolutions note that DVLS, RDM, and Hub can help organizations protect PHI by leveraging centrally managed access controls, audit and accountability features, and strong authentication mechanisms.

As part of our longstanding commitment to security and transparency, we commission multiple third-party audits. Here's more information about the AICPA SOC2 Type-II report!

The latest edition of Remote Desktop Manager 2022.1 is now compliant with FIPS 140-2 Annex A approved encryption functions.

Explore the correct method to disable Web Proxy Auto Detect (WPAD) in Windows to enhance security without breaking essential components. This guide clarifies common misconceptions and provides a safe approach using registry modifications, avoiding potential pitfalls associated with service deactivation.

In the IT world, the terms cybersecurity and IT security are often misused and have their own respective definitions and contexts.

A critical vulnerability was discovered in the Apache log4j project (CVE-2021-44228).

In the James Bond franchise, spies are elegant and sophisticated subversives who can climb treacherous mountains, outswim killer sharks, and even defeat enemies with a handy bagpipe flamethrower. But ...

123456. Qwerty. Iloveyou. No, these are not exercises for people who are brand new to typing. Shockingly, they are among the most common passwords that end users choose in 2021.

Once in a cafe, there was a dialogue between a waiter and a visitor: I asked not for chicken, but beef, and not half-cooked, but fried. Yes, that is a mistake, sorry, but everything is fresh here,...

Recently, my colleague Marc-Olivier looked at some interesting and exciting IT trends in 2021. Unfortunately, technology is not only evolving to make our lives better — cyberthreats are also advancing...

Until a few decades ago, it was common for people to spend their entire career working for a single employer — often starting from the bottom and working their way up through the ranks until retiring....

In our last cybersecurity post on Devolutions, which explained how our MDR service works, we received a lot of great feedback. But we repeatedly got one question that surprised us: “Why would I ever t...

Legendary crooner Frank Sinatra — and a countless number of inebriated wedding guests who fancy themselves as karaoke superstars — have grabbed the mic and belted out the classic song My Way, which in...

It is not malware. It is not spyware. It is not Trojans. It is not even DDoS. No, according to experts the title of the scariest beast on the cyberthreat landscape now belongs to ransomware.

There are some horror movie franchises that get scarier and scarier with each release. Well, the cybercrime landscape is like that: just when you think that things are as frightening as they can get…t...

To say that the last 18 months have been unkind to many organizations is like saying that the sun is rather warm, or that the Himalayas are somewhat hilly. Frankly, the past year-and-a-half has been b...

Explore the pros and cons of fingerprint recognition technology for secure authentication. Understand its benefits and limitations to make decisions about using biometric security in your systems.

While drawing conclusions is difficult — and in many cases unwise — given how uncertain things have been over the last 18 months, one significant fact is indisputable: more organizations are rising to...

Protect RDP passwords from Mimikatz attacks with Remote Credential Guard. Follow our guide to configure this feature in Remote Desktop Manager and boost your remote access security.

Gartner has revealed its list of the top security and risk management trends that will shape the business landscape in 2021. There are eight trends in total, which have been grouped into three categor...

Here at Devolutions, one of our core values is to be transparent in our actions across the organization. As part of this commitment, today I am pleased to announce that going forward, we will be publi...

Managed Detection and Response (MDR) is an outsourced cybersecurity management service that provides organizations with 360-degree visibility into security and proactive detection of cyber threats. MD...

For more than a year now, people have been craving a “return to normal,” both professionally and personally. And while there is reason to be cautiously optimistic that things are stabilizing, some asp...

There are so many data breaches these days, that they all seem to morph together into an endless cycle of cyber destruction. Indeed, we have gone from being shocked at stories about hacks (remember Ta...

Recently, we looked at some of the biggest data breaches of 2020. Here is a recap of some of the most notable incidents: ,300,000 users were impacted by a mass account hijacking campaign at Nintendo...

It goes without saying that the biggest story of 2020 — or make that the 21st century so far — was the coronavirus pandemic. However, while that crisis raged on, hackers did not go into “lockdown mode...

Recently, Devolutions surveyed decision-makers in SMBs worldwide on a variety of key cybersecurity practices and trends. Answers to each question are presented in this report and highlighted in this i...

Apple CEO Tim Cook has said: “Our own information is being weaponized against us with military efficiency. Every day, billions of dollars change hands and countless decisions are made on the basis of ...

There are still a few months left in 2020, but already this year we have seen several high-profile social media data breaches, including: ,In February, Twitter suspended a large network of fake acco...