Risky Biz Soap Box: Preventing MFA reset attacks

Update: 2023-10-12

Description

Patrick Gray speaks to Yubico’s Jerrod Chong about how organisations can better verify the identities of users when performing MFA resets. In other words, how to not get MGM’d.

He also talks about the chain-of-trust issues inherent to synchronisable passkey implementations.

Comments

Top Podcasts

The Best New Comedy Podcast Right Now – June 2024 The Best News Podcast Right Now – June 2024 The Best New Business Podcast Right Now – June 2024 The Best New Sports Podcast Right Now – June 2024 The Best New True Crime Podcast Right Now – June 2024 The Best New Joe Rogan Experience Podcast Right Now – June 20 The Best New Dan Bongino Show Podcast Right Now – June 20 The Best New Mark Levin Podcast – June 2024

In Channel

Risky Business #769 -- Sophos drops implants on Chinese exploit devs

2024-11-0656:51

Risky Business #768 -- CSRB will investigate China's Wiretap Hacks

2024-10-3051:37

Risky Biz Soap Box: Thinkst Canary's decade of deception

2024-10-2837:56

Risky Business #767 – SEC fines Check Point, Mimecast, Avaya and Unisys over hacks

2024-10-2301:02:21

Risky Business #766 – China hacks America's lawful intercept systems

2024-10-1653:57

Snake Oilers: Sandfly Security, Permiso and Wiz

2024-10-0140:22

Risky Business #765 -- The Kaspersky switcheroo

2024-09-2501:05:41

Risky Business #764 -- Mossad expands into telecommunications services

2024-09-1801:02:56

Risky Business #763 – Microsoft un-patches critical bug

2024-09-1151:49

Snake Oilers: Authentik, Dropzone and SlashID

2024-09-0638:03

Risky Business #762 -- Brazil nukes X, Iranian APTs deploy ransomware

2024-09-0401:04:46

Risky Business #761 – Telegram v frogs. Fight!

2024-08-2801:04:32

Feature interview: ASIO Director General Mike Burgess on encryption and access

2024-08-2629:49

Risky Business #760 – Microsoft to make MFA mandatory

2024-08-2101:04:44

Wide World of Cyber: 2024 election interference, the media and Iran's hack and leak

2024-08-1936:23

Risky Business #759 – Why Iran's hack and leak will amount to naught

2024-08-1401:04:35

Soap Box: Making security tech more people friendly

2024-08-1234:35

Risky Business #758 – Crowdstrike's postmortem underwhelms

2024-08-0752:57

Risky Business #757 – The ClownStrike cleanup continues

2024-07-3101:00:49

Wide World of Cyber: Why we should show CrowdStrike no mercy

2024-07-3044:40

00:00

Risky Biz Soap Box: Preventing MFA reset attacks

#box-pro-ellipsis-173111548895514{-webkit-line-clamp:2;}Risky Biz Soap Box: Preventing MFA reset attacks

Risky Biz Soap Box: Preventing MFA reset attacks

Risky Biz Soap Box: Preventing MFA reset attacks