Insurers Made MFA Standard. Now They Need To Ask Which Kind.
Nearly every cyber insurance applicant now says yes to MFA. A new paper says underwriters should ask whether it is phishing-resistant MFA, and on which accounts. A manufacturer required multi-factor authentication (MFA) on every account. It still lost £150,000. The firm allowed text-message codes as the second factor. An attacker used an adversary-in-the-middle attack to … Read more