Tag feed

#mfa

103 posts2 followers

Explore Hashnode

Alternatives

Trending tags this week

MSMd Shakawat Hossainthinking-journal.hashnode.devJul 26 · 6 min read

Multi-Factor Authentication (MFA): Why Everyone Needs It

Today, our digital identity is more valuable than ever. Emails, social media accounts, banking apps, cloud storage, developer platforms and business systems all depend on one important thing: authenti

0

VNVũ Nhật Lâmblog.fiscybersec.comJul 19 · 10 min read

ARToken & EvilTokens: The AI-Augmented Device Code Phishing PhaaS Hijacking Microsoft 365 and Automating BEC Fraud

Executive Summary ARToken is a Phishing-as-a-Service (PhaaS) operator panel published by Cisco Talos on July 1, 2026, which Talos assesses to be an affiliate panel of the EvilTokens platform — the Pha

0

LTLưu Tuấn Anhblog.fiscybersec.comJul 14 · 15 min read

ToddyCat and Umbrij: When OAuth Becomes the New Target of APT Campaigns

Overview The recent campaign recorded by the APT ToddyCat group targets businesses using the Google Workspace (Gmail) email service. By using a specialized tool called Umbrij, attackers do not try to

0

EJEric James BAYSSETTEejbye7.hashnode.devJun 16 · 2 min read

Security controls matter. Evidence makes them defensible

This is becoming a practical rule in cybersecurity. It is no longer enough to say that MFA is deployed. It is no longer enough to say that privileged access is controlled. It is not enough to say that

0

SKSahil Khuranainnostaxengineering.hashnode.devJun 8 · 7 min read

Google Authenticator integration with Spring Boot

Passwords alone just don't cut it anymore. We've all seen the headlines — data breaches, credential stuffing, account takeovers. And yet, a shocking number of applications still rely on a single passw

0

LTLưu Tuấn Anhblog.fiscybersec.comMay 30 · 15 min read

Storm-2949: Hacker Group Turns MFA Into a "Golden Key" to Steal Azure Data

Summary of the campaign The new attack campaign by threat actor group Storm-2949 has raised alarms about the risks of identity self-service features in cloud computing environments. By exploiting the

0

NGNiranjan Gblog.securityinsights.ioMay 25 · 6 min read

The Hidden Threat After Login: Understanding Session Hijacking

You did everything right. You turned on multi-factor authentication (MFA). You use strong passwords. Maybe you even switched to passkeys. So how did an attacker still get into your email? The answer i

0

KKKabya Khanalignitesecurity.hashnode.devMay 18 · 3 min read

How Everyday Habits Stop Cyber Threats

Most cyber breaches begin not with a crazy exploit, but with a preventable human action many people use a reused password, have a delayed update, or a single rushed click. The simplest defenses are di

0

HHugohugovalters.hashnode.devApr 17 · 3 min read

MFA Fatigue: Why Your 'Secure' Push Notifications Are Getting You Hacked

Companies will spend $50,000 a year on a premium Identity Provider (IdP) tier, roll out an authenticator app to the entire org, and proudly declare themselves "unhackable" at the next board meeting. Then Kevin in Sales gets his password scraped by a...

0

HCHazel Chirindahazelchirinda.hashnode.devApr 13 · 3 min read

Navigating Security Challenges When Clients Don’t Have IT Teams

Working with clients who don’t have dedicated IT teams is one of the most challenging yet rewarding experiences in cybersecurity consulting. Without internal experts, every problem — from configuratio

0

#mfa

Search Hashnode

#mfa

Explore Hashnode

Trending tags this week

Multi-Factor Authentication (MFA): Why Everyone Needs It

ARToken & EvilTokens: The AI-Augmented Device Code Phishing PhaaS Hijacking Microsoft 365 and Automating BEC Fraud

ToddyCat and Umbrij: When OAuth Becomes the New Target of APT Campaigns

Security controls matter. Evidence makes them defensible

Google Authenticator integration with Spring Boot

Storm-2949: Hacker Group Turns MFA Into a "Golden Key" to Steal Azure Data

The Hidden Threat After Login: Understanding Session Hijacking

How Everyday Habits Stop Cyber Threats

MFA Fatigue: Why Your 'Secure' Push Notifications Are Getting You Hacked

Navigating Security Challenges When Clients Don’t Have IT Teams