Tutorial / Guidance: How to enable Number Matching in MS Authenticator to prevent 100% of MFA Push Fatigue Attacks

Happy Friday Cyber Sec Pro's! Do you have any plans this weekend? If not, I might have something you can sink your teeth into... Number Matching in MS Authenticator.

It's a feature which essentially rather than prompt a user for a "yes/no" "approve/deny" response on their phone, asks a user to enter a number into a prompt box. This effectively blocks an attacker from flooding a targets phone with MFA requests, fatiguing them into accepting, thinking it's something they've done …

attacks authenticator cybersecurity guidance mfa tutorial