Why MFA Alone Will No Longer Suffice
SC Media, Thursday, June 27th, 2024
Account takeover attacks have become top of mind for today's security leaders, and it's clear why: if gone undetected, these incidents can lead to significant financial losses, business disruption, and reputational damage.
Just about every year we see at least one major attack stemming from account compromise-from the Colonial Pipeline ransomware attack in 2021, to Uber's data breach in 2022, to the U.S. State Department's email breach by Chinese hackers last year. No one wants to become the next account takeover victim to make news headlines, but preventing these attacks requires very hard work.
Account takeovers are only growing in prevalence, as threat actors continue to see success in their attempts to harvest credentials, steal active session cookies, or otherwise gain access to email and cloud software accounts. There are several reasons for this growth-including an uptick in phishing and social engineering, fueled by the rise of generative AI.