Latest MFA news

Hackers abused API to verify millions of Authy MFA phone numbers

Twilio has confirmed that an unsecured API endpoint allowed threat actors to verify the phone numbers of millions of Authy multi-factor authentication users, potentially making them vulnerable to SMS phishing and SIM swapping attacks.
- Lawrence Abrams
- July 03, 2024
- 12:43 PM
- 2
Scathing report on Medibank cyberattack highlights unenforced MFA

A scathing report by Australia's Information Commissioner details how misconfigurations and missed alerts allowed a hacker to breach Medibank and steal data from over 9 million people.
- Lawrence Abrams
- June 18, 2024
- 01:25 PM
- 1
Microsoft: New Outlook security changes coming to personal accounts

Microsoft has announced new cybersecurity enhancements for Outlook personal email accounts as part of its 'Secure Future Initiative,' including the deprecation of basic authentication (username + password) by September 16, 2024.
- Bill Toulas
- June 15, 2024
- 10:12 AM
- 4
Sponsored Content
How to meet evolving MFA demands in the current threat landscape

Multi-factor authentication (MFA) is a crucial weapon in the fight against cybercrime, significantly enhancing online security. Learn more from Specops Software on how to stay on top of the rapidly evolving requirements?
- Sponsored by Specops Software
- June 13, 2024
- 10:01 AM
- 0
AWS adds passkeys support, warns root users must enable MFA

Amazon Web Services (AWS) has introduced FIDO2 passkeys as a new method for multi-factor authentication (MFA) to enhance account security and usability.
- Bill Toulas
- June 12, 2024
- 03:38 PM
- 5
Microsoft to start enforcing Azure multi-factor authentication in July

Starting in July, Microsoft will begin gradually enforcing multi-factor authentication (MFA) for all users signing into Azure to administer resources.
- Sergiu Gatlan
- May 17, 2024
- 02:53 PM
- 1
Bitwarden launches new MFA Authenticator app for iOS, Android

Bitwarden, the creator of the popular open-source password manager, has just launched a new authenticator app called Bitwarden Authenticator, which is available for iOS and Android devices.
- Bill Toulas
- May 02, 2024
- 04:20 PM
- 5
What to do when receiving unprompted MFA OTP codes

Receiving an unprompted one-time passcode (OTP) sent as an email or text should be a cause for concern as it likely means your credentials have been stolen.
- Lawrence Abrams
- December 17, 2023
- 11:06 AM
- 2
Discord adds Security Key support for all users to enhance security

Discord has made security key multi-factor authentication (MFA) available for all accounts on the platform, bringing significant security and anti-phishing benefits to its 500+ million registered users.
- Bill Toulas
- December 14, 2023
- 01:21 PM
- 0
Microsoft Authenticator now blocks suspicious MFA alerts by default

Microsoft has introduced a new protective feature in the Authenticator app to block notifications that appear suspicious based on specific checks performed during the account login stage.
- Bill Toulas
- November 07, 2023
- 10:40 AM
- 1
Microsoft will roll out MFA-enforcing policies for admin portal access

Microsoft will roll out Conditional Access policies requiring multifactor authentication from administrators when signing into Microsoft admin portals such as Microsoft Entra, Microsoft 365, Exchange, and Azure.
- Sergiu Gatlan
- November 06, 2023
- 03:00 PM
- 3
Steam enforces SMS verification to curb malware-ridden updates

Valve has announced implementing additional security measures for developers publishing games on Steam, including SMS-based confirmation codes. This is to deal with a recent outbreak of malicious updates pushing malware from compromised publisher accounts.
- Bill Toulas
- October 15, 2023
- 11:12 AM
- 4
Amazon to make MFA mandatory for 'root' AWS accounts by mid-2024

Amazon will require all privileged AWS (Amazon Web Services) accounts to use multi-factor authentication (MFA) for stronger protection against account hijacks leading to data breaches, starting in mid-2024.
- Bill Toulas
- October 05, 2023
- 01:06 PM
- 2
Retool blames breach on Google Authenticator MFA cloud sync feature

Software company Retool says the accounts of 27 cloud customers were compromised following a targeted and multi-stage social engineering attack.
- Sergiu Gatlan
- September 15, 2023
- 03:15 PM
- 3
W3LL phishing kit hijacks thousands of Microsoft 365 accounts, bypasses MFA

A threat actor known as W3LL developed a phishing kit that can bypass multi-factor authentication along with other tools that compromised more than 8,000 Microsoft 365 corporate accounts.
- Ionut Ilascu
- September 06, 2023
- 06:33 AM
- 2
Ongoing Duo outage causes Azure Auth authentication errors

Cisco-owned multi-factor authentication (MFA) provider Duo Security is investigating an ongoing outage that has been causing authentication failures and errors starting three hours ago.
- Sergiu Gatlan
- August 21, 2023
- 12:26 PM
- 0
LastPass users furious after being locked out due to MFA resets

LastPass password manager users have been experiencing significant login issues starting early May after being prompted to reset their authenticator apps.
- Sergiu Gatlan
- June 24, 2023
- 10:15 AM
- 0
Google will add End-to-End encryption to Google Authenticator

Google is bringing end-to-end encryption to Google Authenticator cloud backups after researchers warned users against synchronizing 2FA codes with their Google accounts.
- Lawrence Abrams
- April 26, 2023
- 05:11 PM
- 4
Outlook app to get built-in Microsoft 365 MFA on Android, iOS

Microsoft will soon fast-track multi-factor authentication (MFA) adoption for its Microsoft 365 cloud productivity platform by adding MFA capabilities to the Outlook email client.
- Sergiu Gatlan
- March 13, 2023
- 01:07 PM
- 1
Bitwarden password vaults targeted in Google ads phishing attack

Bitwarden and other password managers are being targeted in Google ads phishing campaigns to steal users' password vault credentials.
- Lawrence Abrams
- January 26, 2023
- 04:40 PM
- 19