#MFA
All CosmicBytez Labs articles tagged #MFA, across news, security advisories, how-to guides, and projects.
- News
SS7 and Diameter Attacks: How Telecom Signaling Flaws Expose Your Phone
SS7 and Diameter weaknesses let attackers track locations, intercept calls and SMS codes, and impersonate subscribers without touching the device.
- News
Rogue External MFA Providers Can Steal Passwords During Logins
TrustSink lets a privileged Entra admin register a rogue external MFA provider that quietly captures users' passwords in plain text.
- News
Microsoft Reminds Admins to Migrate Entra ID Users to Passkeys Before SMS Retirement
Microsoft is retiring SMS first-factor sign-in for Entra ID on February 1, 2027, and is urging admins to move users to passkeys now.
- News
WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins
Meta announces WhatsApp support for multiple passkeys per account on iOS and Android, ending password reliance with phishing-resistant biometric auth.
- News
Password Spraying Attacks Surge 155x as Hackers Exploit MFA Gaps
Huntress reports a 155x surge in password spraying in H1 2026, with one campaign logging 81 million login attempts in two weeks via MFA and legacy auth gaps.
- News
When Credentials Are No Longer Enough: Device Trust in the AI Era
AI is making phishing, credential theft, and MFA bypass faster and cheaper than ever. As traditional trust signals — passwords, MFA codes, IP geolocation...
- News
Identity Attacks Overtake Exploits as Top Ransomware Cause
Sophos 2026: 79% of ransomware attacks start with stolen identities. MFA was present in 97% of credential-based cases yet failed to stop every one of them.
- Project
Teleport PAM: Zero-Trust Privileged Access for Your Homelab
Deploy Teleport's open-source privileged access management platform to replace static SSH keys with short-lived certificates, enforce MFA, record every...
- HOWTO
The Microsoft 365 Security Baseline Every Small Business Should Have
Eight settings inside the Microsoft 365 admin console that take less than two hours to configure and block 90% of the credential-based attacks targeting…
- Checklist
Microsoft 365 Tenant Security Checklist
Comprehensive security checklist for Microsoft 365 and Entra ID tenants — Conditional Access policies, MFA enforcement, audit logging, DLP configuration,...
- HOWTO
Conditional Access Policies: Zero Trust with Entra ID
Implement Zero Trust security with Microsoft Entra ID Conditional Access. Covers named locations, device compliance, risk-based policies, and...