MFA blind spots and no one talks about it

Caute_cautim — Mon, 09 Oct 2023 10:27:59 GMT

Hi All

Multi-factor Authentication (MFA) has long ago become a standard security practice. With a wide consensus on its ability to fend off more than 99% percent of account takeover attacks, it's no wonder why security architects regard it as a must-have in their environments. However, what seems to be less known are the inherent coverage limitations of traditional MFA solutions. While compatible with RDP connection and local desktop logins, they offer no protection to remote command line access tools like PsExec, Remote PowerShell and their likes.

https://thehackernews.com/2023/03/when-partial-protection-is-zero.html?_m=3n%2e009a%2e2987%2etv0ao44mgf%2e1ymu

Have a good read and lets learn from the experience, the garden may not be as rosy as you think!

Regards

Caute_Cautim

Re: MFA blind spots and no one talks about it

Early_Adopter — Mon, 13 Mar 2023 05:30:47 GMT

We must see them before we can hear them…

Re: MFA blind spots and no one talks about it

Caute_cautim — Mon, 13 Mar 2023 19:03:03 GMT

@Early_AdopterOr experience it before you realise you have been compromised.

Regards

Caute_Cautim

topic MFA blind spots and no one talks about it in Tech Talk

MFA blind spots and no one talks about it

Re: MFA blind spots and no one talks about it

Re: MFA blind spots and no one talks about it