Cyber
The MFA Gaps Attackers Are Still Exploiting
Cybercriminals continue to bypass multi-factor authentication by targeting systems that still rely on passwords alone, such as VPNs, RDP and Windows endpoints.
Tag
#MFA
The latest news, analysis and stories about MFA — TECC.UZ.
6 articles
AI
Fake ChatGPT and Gemini sites target ad managers with advanced credential theft
A sophisticated phishing campaign uses spoofed AI platform websites to steal login credentials and MFA codes from ad account managers.
Cyber
Rogue external MFA providers can steal passwords during logins
Security researchers discovered an attack where hackers with privileged access can register rogue external MFA providers to steal passwords during legitimate logins.
Cyber
MFA's Weakest Link: Account Recovery Becomes the New Attack Path
While MFA makes account takeover harder, attackers are increasingly targeting password resets and recovery processes.
Cyber
BigBear phishing service bypassed MFA at 258 organizations
A phishing-as-a-service framework called BigBear 2.0 has been used to bypass multi-factor authentication at 258 organizations and steal over 5,000 Microsoft 365 credentials.
Cyber
Password Spraying Attacks Surge 155x Amid MFA Gaps
Huntress observed a massive 155x increase in password spraying attacks driven by legacy auth and MFA vulnerabilities.