Traditional MFA is not as secure as you think

An MFA service built on a standard push can be easily manipulated by a hacker to achieve account takeover. Unless augmented with additional security, today’s MFA technologies leave you at risk.

MFA is a form of perimeter security, but the cloud — and today’s work style — has no perimeter. MFA is not designed to stop attacks unrelated to logins. It only secures sign-on at the perimeter, when the user seeks to gain system access. Cybercriminals have developed relatively simplistic yet highly effective social engineering and phishing mechanisms to circumvent this reality.