In this episode of CISO Tradecraft, host G Mark Hardy discusses various mishaps that can occur with Multi-Factor Authentication (MFA) and how these can be exploited by attackers. The talk covers several scenarios such as the misuse of test servers, bypassing of MFA via malicious apps and phishing scams, violation of the Illinois Biometric Information Protection Act by using biometric data without proper consent, and potential future legal restrictions on biometric data usage. G Mark also highlights the significance of correct implementation of MFA to ensure optimum organizational security and how companies can fail to achieve this due to overlooking non-technical issues like legal consent for biometric data collection.
Transcripts: https://docs.google.com/document/d/1FPCFlFRV1S_5eaFmjp5ByU-FCAzg_1kO
References:
Chapters
#60 - CISO Knowledge Domains Part 2
#59 - CISO Knowledge Domains Part 1
#58 - Active Directory is Active with Attacks
#57 - Brace for Audit
#56 - Say Firewall One More Time
#55 - I have more Agents than the FBI
#54 - The Great Resignation
#53 - Fun and Games to Stop Bad Actors (with Dr. Neal Krawetz)
#52 - Welcome to the C-Level (with Nate Warfield)
#51 - New Kid in Town (with Rebecca Mossman)
#50 - Border Gateway Protocol (BGP)
#49 - Cyberlaw Musings (with Mark Rasch)
#48 - Effective Meetings
#47 - More Risky Business with FAIR
#46 - Crisis Leadership with G Mark Hardy‘s 9/11 Experience
#45 - Protecting your Crown Jewels (with Roselle Safran)
#44 - Intro to Docker Containers and Kubernetes (K8s)
#43 - Cyber Deception (with Kevin Fiscus)
#42 - Third Party Risk Management (with Scott Fairbrother)
#41 - Got any Threat Intelligence?
Create your
podcast in
minutes
It is Free
Insight Story: Tech Trends Unpacked
Zero-Shot
Fast Forward by Tomorrow Unlocked: Tech past, tech future
The Unbelivable Truth - Series 1 - 26 including specials and pilot
A Prairie Home Companion: News from Lake Wobegon