Stories from the SOC: Proactive steps to protect customers from misconfigured MFA

Executive summary

Multifactor authentication, or MFA, provides users with an added layer of security when logging into web applications. Surpassing its predecessor, two-factor authentication, in 2023, MFA is a standard option for another layer of security for online accounts. .

In May 2022, the Cybersecurity & Infrastructure Security Agency (CISA) published security advisory AA22-074A describing how default configurations within MFA applications are considered a vulnerability. The tactic was utilized by Russian state-sponsored cyber actors as early as May 2021 in …

accounts amp applications authentication customers cybersecurity executive factor infrastructure infrastructure security logging may may 2022 mfa misconfigured multifactor multifactor authentication proactive protect security soc standard stories web web applications