Microsoft has removed a key obstacle facing organizations seeking to deploy phishing-resistant multifactor authentication (MFA) by enabling certificate-based authentication (CBA) in Azure Active Directory. This comes as experts anticipate advanced phishing attacks will rise next year. “I think social engineering and MFA bypass attacks will continue to grow in 2023, where some other major service providers suffer meaningful breaches like we did this year,” Andrew Shikiar says.


More

Cybersecurity Dive: What is phishing-resistant multifactor authentication? It’s complicated.

Multifactor authentication can bear weaknesses that render its efficacy moot. A common response and answer…

Read More →

All About Security: FIDO Alliance introduces new certification program

The FIDO Alliance has expanded its range of certification programs: With the new Document Authenticity (DocAuth) Certification…

Read More →

Identity-based cyberattacks are the leading cause of security breaches. Here’s how to stop them.

Businesses are facing a surge in attacks using stolen identity credentials — now the largest…

Read More →


Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.