August 12, 2022

Forbes: Why MFA Falls Short And What Can Be Done About It

Stu Sjouwerman, founder, and CEO of KnowBe4 Inc shares his thoughts on how MFAs fell short in data security. A Verizon research report says that 82% of all cyberattacks fall on human error (stolen credentials, phishing, misuse). For a hacker to successfully gain access to credentials they need some level of human involvement to get around MFA defences. Some common phishing techniques include, MiTM attacks, SIM-swapping attacks, “Pass-the-cookie” attacks, and MFA fatigue. The strongest forms of MFAs are based on FIDO2 standards that enables users to access resources through biometrics. The deployment of FIDO2 eliminates the risk of phishing attacks but ensuring users are well trained to identify cyberthreats is just as important if not more.

MORE FIDO in the News


Biometric Update: Transparency can drive digital ID equity, policy forum panelists say

An event last week on ‘Identity, Authentication and the Road...

February 3, 2023

Tech Republic: Unphishable mobile MFA through hardware keys

Passwords are a mess, MFA can be more of a...


Intelligent CISO: Passing on passwords in 2023 (finally)

Passwords are often an organisation’s weakest link. On World Password...


CyberWire: NIST on phishing resistance

According to NIST Special Publication DRAFT 800-63-B4, a phishing-resistant authenticator...

Download Authn Specs
Sign up for updates!Get news from FIDO Alliance in your inbox.

By submitting this form, you are consenting to receive communications from: FIDO Alliance, 3855 SW 153rd Drive, Beaverton, OR 97003, US, http://www.fidoalliance.org. You can revoke your consent to receive emails at any time by using the unsubscribe link found at the bottom of every email.