4 min read
MFA Prompt Bombing: When Multi-Factor Authentication Becomes a Nuisance — and a Risk
Multi-factor authentication (MFA) is widely considered one of the best affordable controls for preventing account takeover. But like every security...
Multi-factor Authentication
2 min read
Is Switching to Passwordless Authentication Possible with Tools we Already Have?
We are all facing password fatigue, and many institutions we work with are asking for longer passwords and more of them to pair with authenticator...
2 min read
The Wild, Untamed, and Exciting World of Passkeys
In today's digital landscape, securing user authentication is more critical than ever. Recently, I explored the benefits of using Yubikeys and...
3 min read
Is it Time to Go Passwordless?
For years, having long and complex passwords has been ingrained in us as a requirement, so it may seem strange to consider eliminating passwords...
3 min read
Understanding the Second Amendment to DFS Part 500: What Financial Institutions Need to Know
The Second Amendment to the New York Department of Financial Services (NYDFS) Part 500, finalized on November 1, 2024, introduces more stringent...
1 min read
Strengthening the Fort
In an era dominated by digital advancements, the financial industry stands at the forefront of technological innovation. As financial institutions...
2 min read
Five Findings from the 2023 IBM Security Cost of a Data Breach Report
I was reviewing the 2023 IBM Security Cost of a Data Breach Report this week and wanted to share some findings I found interesting. This report is...
2 min read
Business Email Compromise: Attacks Immune to Multi-Factor Authentication
They’ve come back around…those business email compromises, which were all too common in the late 2010s.