Risky Biz Soap Box: Preventing MFA reset attacks

Patrick Gray speaks to Yubico’s Jerrod Chong about how organisations can better verify the identities of users when performing MFA resets. In other words, how to not get MGM’d.

He also talks about the chain-of-trust issues inherent to synchronisable passkey implementations.

attacks box can identities mfa mgm passkey patrick gray performing reset risky-business soap talks trust trust issues verify yubico