As cited
Copy frozen at (site build).
identity access
MFA's Weakest Link: Account Recovery Is the New Attack Path
Multifactor authentication (MFA) raises the bar for direct account compromise, but attackers are shifting focus to account recovery processes that reset passwords and authentication methods. Stronger identity verification procedures at service desks can mitigate social engineering attacks that exploit these recovery flows.
Why it matters: Organizations relying on MFA need to harden account recovery workflows, as service desk personnel are now a prime target for attackers seeking to bypass authentication controls.
- Source published
- First seen by Cybersecurity Tracker