MFA

Your frontline workers have a workaround for that MFA prompt

authentication, cybersecurity, FIDO Alliance, healthcare, manufacturing sector, MFA, News, passkeys, passwordless, passwords, report, survey /

Your frontline workers have a workaround for that MFA prompt 2026-10-20 at 07:30 By Anamarija Pogorelec Frontline workers in healthcare and manufacturing are getting around slow, unreliable logins by staying signed in, sharing credentials and trying to bypass multifactor authentication. Sapio Research surveyed 700 IT and security decision-makers in August, and 95% said they had […]

Your frontline workers have a workaround for that MFA prompt Read More »

NIS2 compliance: 7 low-cost steps to secure credentials

access controls, Compliance, credentials, Don't miss, Features, Hot stuff, MFA, News, Passwork /

NIS2 compliance: 7 low-cost steps to secure credentials 2026-10-06 at 08:00 By Help Net Security Security budgets rarely stretch to cover a full NIS2 programme in one pass. Credential controls are where a constrained team can start, because they make access visible, revocable, and reviewable without new infrastructure. NIS2 compliance rests on risk-management measures that […]

NIS2 compliance: 7 low-cost steps to secure credentials Read More »

NIS2 compliance: Fixing IAM and access control before the 2026 audit

access management, Compliance, credentials, Don't miss, Europe, Expert analysis, Hot stuff, MFA, News, opinion, Passwork, regulation /

NIS2 compliance: Fixing IAM and access control before the 2026 audit 2026-09-01 at 08:00 By Help Net Security The NIS2 Directive places direct obligations on organizations across supply chain risk management, incident reporting, and board-level accountability. October brings a new wave of legally binding deadlines across the EU, as member states move from transposition into […]

NIS2 compliance: Fixing IAM and access control before the 2026 audit Read More »

The MFA Identity Trap: When Authentication Creates a False Sense of Security

2FA, Identity & Access, MFA /

The MFA Identity Trap: When Authentication Creates a False Sense of Security 2026-08-26 at 14:00 By Torsten George Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop. The post The MFA Identity Trap: When Authentication Creates a False Sense of Security appeared first on […]

The MFA Identity Trap: When Authentication Creates a False Sense of Security Read More »

Microsoft Entra ID is removing an extra MFA hurdle for Windows Hello and macOS PSSO users

authentication, MFA, Microsoft, Microsoft Entra ID, News /

Microsoft Entra ID is removing an extra MFA hurdle for Windows Hello and macOS PSSO users 2026-08-10 at 16:19 By Sinisa Markovic Microsoft is changing how Entra ID handles MFA for people who sign in with Windows Hello for Business (WHfB) or macOS Platform Single Sign-On (PSSO). The rollout reaches worldwide and GCC tenants starting […]

Microsoft Entra ID is removing an extra MFA hurdle for Windows Hello and macOS PSSO users Read More »

Exposed credentials are giving attackers a head start many organizations don’t see

credentials, cybersecurity, Enzoic, identity management, MFA, News, report /

Exposed credentials are giving attackers a head start many organizations don’t see 2026-07-30 at 07:00 By Anamarija Pogorelec Compromised credentials can remain active long after passwords are created, leaving organizations trying to identify exposed accounts before attackers can use them. The 2026 Credential Risk Report from Enzoic shows growing awareness of the problem, but monitoring […]

Exposed credentials are giving attackers a head start many organizations don’t see Read More »

Microsoft Entra ID authentication overhaul to start in September 2026

authentication, MFA, Microsoft, Microsoft Entra ID, News, passkeys /

Microsoft Entra ID authentication overhaul to start in September 2026 2026-07-14 at 11:49 By Anamarija Pogorelec Microsoft will begin rolling out passkeys as the default authentication experience for Microsoft Entra ID in the public cloud on September 1, 2026. Organizations with SMS or voice authentication enabled will automatically be enabled for passkeys. The next time […]

Microsoft Entra ID authentication overhaul to start in September 2026 Read More »

Only 28% of financial workforce MFA is phishing-resistant

authentication, cybersecurity, financial industry, identity protection, MFA, News, passwordless, report, SaaS, Secret Double Octopus /

Only 28% of financial workforce MFA is phishing-resistant 2026-07-10 at 08:41 By Anamarija Pogorelec Passwords remain part of many workforce authentication flows in financial organizations, making phishing and credential theft major identity security risks, according to a new Secret Double Octopus report. Key challenges preventing universal implementation of phishing-resistant MFA (Source: Secret Double Octopus) Workforce […]

Only 28% of financial workforce MFA is phishing-resistant Read More »

Mirage2FA phishing kit uses HTML smuggling to steal Microsoft 365 credentials

cybercrime, Fortra, MFA, Microsoft 365, News, phishing /

Mirage2FA phishing kit uses HTML smuggling to steal Microsoft 365 credentials 2026-06-26 at 12:26 By Sinisa Markovic Mirage2FA, a phishing kit that combines short-lived HTML smuggling with obfuscated JavaScript loaders to deliver fake Microsoft 365 login pages and steal credentials during MFA prompts, has been identified by researchers at Fortra. Fortra based its analysis on […]

Mirage2FA phishing kit uses HTML smuggling to steal Microsoft 365 credentials Read More »

Webinar Today: How Modern Breaches Bypass MFA and Evade Detection

Identity & Access, MFA, Webinar /

Webinar Today: How Modern Breaches Bypass MFA and Evade Detection 2026-06-17 at 17:07 By SecurityWeek News Attendees will learn how attackers evade conventional detection methods, why legacy MFA alone is no longer sufficient, and how organizations can strengthen their defenses. The post Webinar Today: How Modern Breaches Bypass MFA and Evade Detection appeared first on […]

Webinar Today: How Modern Breaches Bypass MFA and Evade Detection Read More »

Microsoft hands Entra ID users new option for MFA

authentication, MFA, Microsoft, Microsoft Entra ID, News /

Microsoft hands Entra ID users new option for MFA 2026-03-25 at 12:46 By Anamarija Pogorelec Organizations rely on MFA to enforce identity checks before granting access to systems and services. Microsoft has made external MFA generally available in Microsoft Entra ID, expanding support for third-party identity providers. Configure external MFA in Microsoft Entra ID (Source: […]

Microsoft hands Entra ID users new option for MFA Read More »

Vulnerabilities from years ago still opening doors for attackers

Artificial Intelligence, Cisco, cybercrime, Email, MFA, News, Ransomware, report, survey, vulnerability /

Vulnerabilities from years ago still opening doors for attackers 2026-03-24 at 14:02 By Sinisa Markovic Exploitation timelines continued to compress in enterprise environments, with newly disclosed flaws reaching active use almost immediately and older weaknesses remaining active years after disclosure. (Source: Cisco Talos) Findings from Cisco Talos’ 2025 Year in Review show how attackers combined […]

Vulnerabilities from years ago still opening doors for attackers Read More »

Passwords, MFA, and why neither is enough

authentication, Don't miss, FIDO Alliance, MFA, News, passwords, Portnox, strategy, tips, Video /

Passwords, MFA, and why neither is enough 2026-03-13 at 07:37 By Help Net Security Passwords weren’t enough, so we added MFA. Now MFA isn’t enough either. In this Help Net Security video, Karlo Zatylny, CTO/CISO at Portnox, walks through why each layer of identity security has failed and what comes next. SMS codes can be […]

Passwords, MFA, and why neither is enough Read More »

Cybercriminals are scaling phishing attacks with ready-made kits

Barracuda Networks, credentials, cybercrime, cybercriminals, Don't miss, MFA, News, phishing /

Cybercriminals are scaling phishing attacks with ready-made kits 2026-01-08 at 09:10 By Anamarija Pogorelec Phishing-as-a-Service (PhaaS) kits lower the barrier to entry, enabling less-skilled attackers to run large-scale, targeted phishing campaigns that impersonate legitimate services and institutions, according to Barracuda Networks. Phishing kits grow more sophisticated and scalable Barracuda threat analysts found that in 2025 […]

Cybercriminals are scaling phishing attacks with ready-made kits Read More »

Session tokens give attackers a shortcut around MFA

access control, authentication, Compliance, cside, cybersecurity, Don't miss, MFA, News, Video /

Session tokens give attackers a shortcut around MFA 2025-12-22 at 07:45 By Help Net Security In this Help Net Security video, Simon Wijckmans, CEO at cside, discusses why session token theft is rising and why security teams miss it. He walks through how web applications rely on browsers to store session tokens after login often […]

Session tokens give attackers a shortcut around MFA Read More »

Passwordless is finally happening, and users barely notice

authentication, cybersecurity, identity management, MFA, News, Okta, passwordless, report /

Passwordless is finally happening, and users barely notice 2025-12-16 at 07:32 By Anamarija Pogorelec Security teams know the strain that comes from tightening authentication controls while keeping users productive. A new report from Okta suggests this strain is easing. Stronger authentication methods are gaining traction, and many of them let users move through sign in […]

Passwordless is finally happening, and users barely notice Read More »

The identity mess your customers feel before you do

authentication, cybersecurity, Descope, identity management, MFA, News, passkeys, passwords, report /

The identity mess your customers feel before you do 2025-11-27 at 07:55 By Anamarija Pogorelec Customer identity has become one of the most brittle parts of the enterprise security stack. Teams know authentication matters, but organizations keep using methods that frustrate users and increase risk. New research from Descope shows how companies manage customer identity […]

The identity mess your customers feel before you do Read More »

Old authentication habits die hard

Artificial Intelligence, authentication, cybersecurity, MFA, News, passkeys, report, Yubico /

Old authentication habits die hard 2025-10-06 at 07:48 By Anamarija Pogorelec Many organizations still rely on weak authentication methods while workers’ personal habits create additional risks, according to Yubico. Training and policy gaps 40% of employees said they have never received cybersecurity training. Even among those who have, the guidance is often outdated because many […]

Old authentication habits die hard Read More »

Akira ransomware: From SonicWall VPN login to encryption in under four hours

Arctic Wolf Networks, credentials, Don't miss, enterprise, Hot stuff, MFA, News, Ransomware, SMBs, SonicWall, vulnerability /

Akira ransomware: From SonicWall VPN login to encryption in under four hours 2025-09-29 at 18:47 By Zeljka Zorz Four hours or less: that’s how long it takes for Akira affiliates to break into organizations and deploy the ransomware on their systems, Arctic Wolf researchers have warned. Armed with SonicWall SSL VPN credentials stolen in earlier […]

Akira ransomware: From SonicWall VPN login to encryption in under four hours Read More »

Scroll to Top