SSO/MFA

This week, in the enterprise security news, NOTE: We didn't get to 2, 3, 5, or 7 due to some technical difficulties and time constraints, but we'll hit them next week! The show notes have been updated to reflect what we actually discussed this week: https://www.scworld.com/podcast-segment/13370-enterprise-security-weekly-387 Snowflake takes sec...

Any form of MFA is better than passwords alone, but organizations must implement modern, phishing-resistant forms of MFA to truly improve their security postures.

The UK’s cyber watchdog says that companies need to be more mindful with how they handle their multi-factor authentication.

As the medical community is grateful for antibiotics but are deeply concerned about new antibiotic-resistant bacteria, the cybersecurity community appreciates the additional security text-based 2FA brings but knows that it loses its effectives as attackers find new ways to overcome it.

Here are four shortcomings of MFA in preventing account takeovers – and what to do about it.

A CISA study found SMBs and vendors tend to have misaligned perspectives on SSO adoption.

Commission staff requested MFA be deactivated on the account several months before it was compromised.