The Ultimate Guide to Multi-factor authentication
A curated Indian edition of TechDay news, analysis, interviews, reviews, job moves, and related resources for Multi-factor authentication (MFA).
What to know about Multi-factor authentication
Multi-factor authentication (MFA) is a cybersecurity process that requires users to present multiple forms of verification before gaining access to systems or data, significantly reducing the risk of unauthorized access. With cyber threats on the rise, including data breaches, ransomware, and phishing attacks targeting both individuals and organisations, MFA has become a critical component in digital security strategies.
Recent developments highlight the expanding adoption of MFA across various industries and technologies, from cloud services and identity management platforms to hardware-based security keys and biometric authentication methods. MFA solutions continue to evolve, addressing challenges such as ease of use, phishing resistance, and integration with emerging technologies like AI and cloud computing.
For readers interested in understanding how MFA strengthens digital security, mitigates risks associated with compromised credentials, and supports compliance with cybersecurity standards, these stories offer valuable insights. Exploring MFA-related topics can help individuals and organisations make informed decisions on implementing robust, adaptive authentication measures to protect sensitive information in an increasingly connected world.
Indian Multi-factor authentication News
Regional stories with direct local relevance
Makop ransomware group sharpens tools in India focus
Makop ransomware pivots to India with RDP brute force, privilege exploits and GuLoader as it leans on basic flaws over bespoke tools.
Festive-season cyber fraud surges as shoppers seek discounts
Festive-season cyber fraud is surging across India, with Karnataka alone reporting losses above INR ₹2,000 crores, experts warn.
Sixty-eight percent of Indians faced phishing scams last year
A survey shows 68% of Indians encountered phishing scams last year, amid growing concerns over AI-driven cyber threats and weak security habits.
Saviynt partners with St. Fox to boost identity security in India
Saviynt teams up with St. Fox to enhance identity security in India, targeting rapid digital transformation across key sectors with integrated solutions.
Analyst Insights
Research and market analysis connected to Multi-factor authentication
Deepfake fraud attacks rise 180% as identity checks fail
Mandiant study finds USD $4.3 million annual benefit
Gartner says 40% of governments will create TrustOps
Infobip launches AgentOS platform, targets agentic AI shift
DigiCert updates document trust tool to curb AI fraud
Expert Columns
Cyber hygiene 101: The big fundamentals
A long time ago in a galaxy far, far away…Cybersecurity was already hard
Why service desks are emerging as a critical security weakness
Stolen credentials don't have to mean a breach
Building security outcomes for small businesses: Why breaches persist despite available tools
Small alert, big defense: Inside a SOC's early-morning response
How phone verification keeps customer data accurate
Why digital identity is the new perimeter in a zero-trust world
Bridging the gap: Cybersecurity breakthroughs and imbalances
Account Takeover (ATO) fraud: The hidden threat to your business and how to stop it
Interviews
Interviews and video coverage from the network
Recent Multi-factor authentication News
Yubico's YubiKey 5.8 adds digital signing features
The update could let companies use a single security key to approve payments, documents and AI actions without custom cryptography.
1Password launches Claude browser login for AI agents
The update lets AI agents sign in without seeing passwords, easing a major security hurdle for firms automating browser tasks.
WhatsApp GhostPairing attack gives intruders access
Attackers can stay inside WhatsApp accounts after a single fake device approval, exposing messages, calls and contacts without alerts.
Phishing toolkits target Microsoft 365 MFA in surge
Account takeovers are becoming harder to stop as attackers use real-time code theft and fake login pages to bypass Microsoft 365 MFA.
SonicWall urges focus on patch speed over CVE count
The real risk lies in unpatched flaws, as attackers increasingly exploit fixes already available but not yet installed.
Proofpoint spots Entra ID spoofing attack technique
Attackers can now probe Entra ID accounts and passwords at scale without a real app, leaving defenders with little sign-in telemetry.
WatchGuard warns of shadow AI & weak security habits
Persistent gaps in basic cyber hygiene are leaving small businesses exposed, with most staff reusing passwords and many using unauthorised AI tools.
AI now runs parts of cyber attacks, Check Point says
Defenders face shorter patching windows as Check Point says AI can now turn new flaws into working exploits within hours.
Microsoft makes passkeys default for Entra ID logins
Users relying on SMS or voice for sign-ins will be nudged to passkeys as Microsoft phases out weaker multifactor methods in Entra ID.
OpenAI requires hardware-backed passkeys for cyber access
Users who miss the deadline will lose access to OpenAI's most advanced cyber models, as the firm tightens defences against phishing.
Helix data extortion group linked to BlackFile, ShinyHunters
Businesses face a fresh wave of identity theft-driven extortion as Helix is linked to BlackFile and ShinyHunters through shared infrastructure.
ESET warns of AI abuse & quishing surge in attacks
Malicious AI skills are helping criminals steal data and run malware, while QR-code phishing climbed 146% in the latest ESET report.
Vonage launches Okta authentication suite to curb fraud
Enterprises using Okta may gain stronger checks against SIM swap fraud and inflated traffic as Vonage packages SMS and voice authentication.
China-aligned spies target university Roundcube servers
Sensitive physics and engineering research at US and Canadian universities may have been exposed after hackers used Roundcube flaws to enter mail servers.
Yubico launches Android passkey enabler for YubiKeys
Android users and IT teams can now deploy YubiKeys as hardware-backed passkeys, following Google Play Services support for NFC security keys.
Barracuda warns of Microsoft phishing & malware rise
Attackers are increasingly using genuine Microsoft pages and browser tricks to steal session tokens, passwords and spread malware, Barracuda says.
Entrust launches biometrics to curb AI account takeover
Businesses are under pressure to verify users beyond login as AI-generated deepfakes drive account takeover and fraud losses mount.
Google sues Chinese phishing network over fake texts
The scam network's fake texts may have reached millions of Android users, with authorities linking it to major card theft and losses.
Barracuda launches AI email protection for Microsoft 365
A single phishing email can now compromise identities, bypass multifactor authentication and hit endpoints within five minutes, Barracuda said.
Fans warned over World Cup cyber scams & fake tickets
Fans buying tickets or streams for the FIFA World Cup face fake sites, rogue apps and QR-code traps that can steal payment details.