In this episode of CISO Tradecraft, host G Mark Hardy discusses various mishaps that can occur with Multi-Factor Authentication (MFA) and how these can be exploited by attackers. The talk covers several scenarios such as the misuse of test servers, bypassing of MFA via malicious apps and phishing scams, violation of the Illinois Biometric Information Protection Act by using biometric data without proper consent, and potential future legal restrictions on biometric data usage. G Mark also highlights the significance of correct implementation of MFA to ensure optimum organizational security and how companies can fail to achieve this due to overlooking non-technical issues like legal consent for biometric data collection.
Transcripts: https://docs.google.com/document/d/1FPCFlFRV1S_5eaFmjp5ByU-FCAzg_1kO
References:
Chapters
#178 - Cyber Threat Intelligence (with Jeff Majka & Andrew Dutton)
#177 - 2024 CISO Mindmap (with Rafeeq Rehman)
#176 - Reality-Based Leadership (with Alex Dorr)
#175 - Navigating NYDFS Cyber Regulation
#174 - OWASP Top 10 Web Application Attacks
#173 - Mastering Vulnerability Management
#172 - Table Top Exercises
#171 - Navigating Software Supply Chain Security (with Cassie Crossley)
#170 - Responsibility, Accountability, and Authority
#168 - Cybersecurity First Principles (with Rick Howard)
#167 - Cybersecurity Apprenticeships (with Craig Barber)
#166 - Cyber Acronyms You Should Know
#165 - Modernizing Our SOC Ingest (with JP Bourget)
#164 - The 7 Lies in Cyber
#163 - Operational Resilience
#162 - CISO Predictions for 2024
#161 - Secure Developer Training Programs (with Scott Russo) Part 2
#160 - Secure Developer Training Programs (with Scott Russo) Part 1
#159 - Refreshing Your Cybersecurity Strategy
Create your
podcast in
minutes
It is Free
Insight Story: Tech Trends Unpacked
Zero-Shot
Fast Forward by Tomorrow Unlocked: Tech past, tech future
Black Wolf Feed (Chapo Premium Feed Bootleg)
Bannon`s War Room