Tag: #mfa6 results
Microsoft is transitioning Entra ID to passkeys as the default authentication method, phasing out SMS and voice-based MFA by February 2027. This move aims to combat AI-driven phishing and credential theft by establishing a passwordless security standard.
Attackers executed 81 million login attempts against Microsoft 365 users via an automated password spray campaign. The breach exploited gaps in multi-factor authentication (MFA) configurations, specifically targeting non-enforced apps.
Data breaches are frequently linked to poor password hygiene, including credential reuse and insecure sharing. Organizations are urged to move beyond static passwords to mitigate these risks.
CISA warns IT leaders to harden Microsoft Intune configurations after pro-Iranian Handala group hacked Stryker. Key measures include phishing-resistant MFA, least privilege access, and multi-admin approvals. Advice extends to all endpoint management systems.
Cloudflare introduces mandatory authentication and independent MFA tools. They provide continuous enforcement from machine boot until accessing sensitive resources. This closes security gaps in the authentication chain.
Passkeys offer passwordless sign-in or phishing-resistant 2FA on GitLab using biometrics, PIN, or FIDO2 keys. They leverage WebAuthn with private keys secured on devices. Supports major browsers, iOS 16+, Android 9+ as default MFA.