On June 18, 2024, Davis Hake published “Moving Beyond Multifactor Authentication” in Risk Management magazine. The following is an excerpt:
Multi-factor authentication (MFA) is an authentication method that requires two or more factors to verify the user's identity and grant access to a system, account or other online resource. Often, this is something you know, like a password, and something you have, such as a security code sent by SMS or push-based mobile app. These common implementations of MFA with passwords and codes have always had the critical vulnerability of someone intercepting that security code or getting it from the user via phishing.
Click here to access the article.