4404 Founders·1d agoShared Accounts and MFA: What EU Rules AllowShared accounts and MFA under CIR 2024/2690 point 11.5.3: when a shared login is allowed, what ENISA expects and how to handle break-glass accounts.13 min read·404-founders.com
QQnayds Seo·2d agoThe Importance of Multi-Factor Authentication (MFA) in CybersecurityDiscover how Multi-Factor Authentication (MFA) works, why it matters, and how it helps protect your online accounts from cyber threats.5 min read·qnayds.hashnode.dev
4404 Founders·5d agoSonicWall CVE-2026-19868: SSL-VPN SAML MFA BypassSonicWall CVE-2026-19868 lets SSL-VPN logins skip SAML and may also skip MFA. Exploited, in CISA KEV. Fixed in SonicOS 7.3.4-7013 and 8.2.3-8015.11 min read·404-founders.com
4404 Founders·5d agoWatchGuard AuthPoint CVE-2026-121639: MFA Gateway FlawsWatchGuard AuthPoint Gateway CVE-2026-121639 (CVSS 9.2) plus MitM, replay and HMAC flaws before 7.6.0. The Gateway needs a manual upgrade.10 min read·404-founders.com
SShomil Bansal·5d agoWhy MFA Projects Fail After a Successful Login Test: Lessons from Legacy SSO IntegrationLessons from troubleshooting enterprise MFA integration across Oracle Access Manager, Keycloak and Entra ID: cookies, redirects and SSO sessions.15 min read·shomilbansal.hashnode.dev
DDamiano Bianda·Nov 7Your MFA Didn't Fail. It Was Never Asked: the SonicWall SAML BypassThere is a special kind of security incident in which every control you configured worked exactly as designed, and you got breached anyway. CVE-2026-19868, an authentication-enforcement vulnerability5 min read·damianobianda.hashnode.dev
TThyne Ventures·6d agoWhich Snowflake users still log in with a password and no MFA? One read-only query to checkPassword-only Snowflake logins without MFA are one of the easiest account takeovers to prevent — and one of the most common gaps after a few years of hiring. The admin-role check catches the highest-p2 min read·thyneventures.hashnode.dev
HHazel Chirinda·Nov 6Beyond MFA: What Occurs After an Attacker Gains Access?Discover how attackers exploit stolen sessions, malicious OAuth apps, and compromised accounts, plus ways to strengthen Microsoft 365 security.10 min read·hazelsec.hashnode.dev
AAlan Conlon·Nov 3Hunting MFA Fatigue in Sentinel: Building the Detection One Line at a TimePush-bombing leaves a loud shape in SigninLogs. In Sentinel, a KQL count, a threshold and a join are enough to catch it.6 min read·alanconlon.hashnode.dev
ZZero Trust Threads·Oct 26What Multi-Factor Authentication Actually Protects You FromLearn what multi-factor authentication protects against, why MFA methods differ, and how phishing-resistant MFA and passkeys improve security.6 min read·zerotrustthreads.hashnode.dev
