News for hackers. Stuff that matters.

A comment on Lapsus$ and SolarWinds hackers both use the same old trick to bypass MFA. Parent comment

Re:Lapsus$ and SolarWinds hackers both use the same old tric... by badrabbit on Thursday March 31, 2022 @03:30AM (#30864737)
It's not Microsot's MFA, others do this also. It's push notification authentication. Better than SMS in that sim swapping or ss7 type attacks won't work on it. They also support yubikey/fido, it's up to your AAD admin to allow any of those.
[ Parent | on HN ]

There are no comments on this comment yet.