passkeys

Insurers Made MFA Standard. Now They Need To Ask Which Kind.

by
Cyber Insurance News report on phishing-resistant MFA showing a hardware security key resting on a ticked insurance application form on a sunlit desk

Nearly every cyber insurance applicant now says yes to MFA. A new paper says underwriters should ask whether it is phishing-resistant MFA, and on which accounts. A manufacturer required multi-factor authentication (MFA) on every account. It still lost £150,000. The firm allowed text-message codes as the second factor. An attacker used an adversary-in-the-middle attack to … Read more

The MFA Box Is Ticked. Attackers Walk Through It Anyway.

by
Cyber Insurance News report on MFA phishing showing a laptop video call with a silhouetted caller and a phone displaying an approval check mark

Attackers are getting past multi-factor authentication by having employees complete it for them, Ontinue’s first-half threat report shows. Device-code phishing and fake IT support calls on Microsoft Teams both work this way. For underwriters, a yes on the MFA question now says less. The victim signs in on Microsoft’s real page. They pass multi-factor authentication … Read more

They Said They Had MFA. They Were Telling the Truth. The Claim Still Failed – New Podcast

by

Two security leaders explain why binary questionnaire items produce honest answers and denied claims, and what insurers could ask instead. The latest CINI podcast opens with a question I thought had an obvious answer. It does not. Julien Richard, vice president of information security at Lastwall, spent part of the hour describing a company that … Read more

×