Get the latest tech news
Why MFA alone won’t protect you in the age of adversarial AI
While MFA is still critical in identity verification, experts say it should be just a small piece of the authentication process.
“Traditional MFA methods, such as SMS and push notifications, have proven to be vulnerable to various attacks, making them nearly as susceptible as passwords alone,” said Frank Dickson, group VP for security and trust at IDC. Threat actors may also deploy tools that mirror login pages, tricking users into providing both their passwords and MFA codes. It can ultimately be a mix of passwords, push notifications, fingerprint scans, physical possession of a device, biometrics or hardware and RSA tokens (and whatever evolves next).
Or read this on Venture Beat