mfa news
3 stories
MFA Ineffective Against OAuth Consent Abuse Without Governance
A recent report highlights a significant limitation in the effectiveness of multi-factor authentication (MFA) when confronted with OAuth consent abuse. While MFA is widely recognized as a crucial security control, it does not inherently protect against the specific vector of attack that leverages misused or over-privileged OAuth consents. This finding underscores that even with MFA in place,…
The MFA Identity Trap: When Authentication Creates a False Sense of Security
A recent report highlights a critical security vulnerability termed the "MFA Identity Trap," where organizations mistakenly equate identity verification, authentication, and threat detection. This conflation reportedly fosters a false sense of security, allowing systems to authenticate malicious actors rather than preventing their access. The report emphasizes the necessity of clearly…
FortiBleed: Credential Reuse, Legacy Hashes, and the Risk of Internet-Exposed FortiGate Devices
The cybersecurity landscape is grappling with the fallout from "FortiBleed," a widespread credential abuse campaign targeting internet-exposed FortiGate devices. Public reports emerged in June 2026 detailing extensive datasets containing Fortinet-related URLs, device records, usernames, and credentials. This activity is not attributed to a single new vulnerability but rather the reuse of…