How MFA can be bypassed by a push notification

View organization page for Rapid7

199,436 followers

📱 MFA is often touted as a cure-all for data breaches. But a well-timed push notification might be all that a malicious actor needs to get a foothold. In a new PenTales blog, a Rapid7 expert details how they gained access to an established university's systems – all thanks to one unsuspecting professor: http://xmrrwallet.com/cmx.pr-7.co/3IMdcaK

Trevor Christiansen

Application Penetration Tester

1w

Love this

Chip Lewis

Manager, Security and Compliance, PCI-ASV, CISSP

1w

This was a great read. Using both known vulnerabilities and weaknesses like open ports to gain access.

See more comments

To view or add a comment, sign in

Explore topics