Stu Sjouwerman, founder, and CEO of KnowBe4 Inc shares his thoughts on how MFAs fell short in data security. A Verizon research report says that 82% of all cyberattacks fall on human error (stolen credentials, phishing, misuse). For a hacker to successfully gain access to credentials they need some level of human involvement to get around MFA defences. Some common phishing techniques include, MiTM attacks, SIM-swapping attacks, “Pass-the-cookie” attacks, and MFA fatigue. The strongest forms of MFAs are based on FIDO2 standards that enables users to access resources through biometrics. The deployment of FIDO2 eliminates the risk of phishing attacks but ensuring users are well trained to identify cyberthreats is just as important if not more.
More FIDO in the News
Cyberscoop: It’s time to put multi-factor authentication in the NIST Cyber Framework
In this article in Cyberscoop, Executive Director Brett McDowell explains why multi-factor authentication is a…
The Paypers: You can now meet PSD2 authentication requirements while improving user experience
In this article in The Paypers, FIDO Alliance Executive Director Brett McDowell explains how FIDO…
Harvard Business Review: 8 Ways Governments Can Improve Their Cybersecurity
This article in Harvard Business Review lays out 8 principles that governments around the world…
