Forbes contributors publish independent expert analyses and insights. Davey Winder is a veteran cybersecurity writer, hacker and analyst. Update, Dec. 25, 2024: This story, originally published Dec.

From cloud to on-premises access, having two-factor authentication (2FA) can help keep attackers at bay. The goal is to get the attackers to go somewhere else and leave you alone. But what if an ...

Leave it to Microsoft to make something as simple as a two-factor authentication (2FA) app as complicated as possible. Thankfully, Microsoft is cleaning up its hodge-podge of authenticator apps that ...

Recent observations by cybersecurity analysts reveal a concerning trend in the field of cybersecurity: the emergence of a new phishing-as-a-service (PhaaS) platform dubbed "Tycoon 2FA." This tool is ...

A deceptive phishing threat coined 'Sneaky 2FA' steals login credentials and bypasses two-factor authentication using fake browser pop-ups ...

Microsoft Authenticator, a popular app for generating 2FA codes and storing passwords, has supported password autofill for years. However, that is all going by the wayside. Here's how to save your ...

A new phishing-as-a-service (PhaaS) platform named 'Rockstar 2FA' has emerged, facilitating large-scale adversary-in-the-middle (AiTM) attacks to steal Microsoft 365 credentials. Like other AiTM ...

In context: Microsoft has been pushing for new security standards for years. Recently, the company has amped up its efforts to kill off passwords, and now, company Director of Identity Security Alex ...

Barracuda unveils Whisper 2FA, a stealth phishing-as-a-service kit aimed at Microsoft 365. It loops to steal credentials and MFA tokens and advances fast despite legacy defenses. Whisper 2FA is an ...