📱 MFA is often touted as a cure-all for data breaches. But a well-timed push notification might be all that a malicious actor needs to get a foothold. In a new PenTales blog, a Rapid7 expert details how they gained access to an established university's systems – all thanks to one unsuspecting professor: http://xmrrwallet.com/cmx.pr-7.co/3IMdcaK
This was a great read. Using both known vulnerabilities and weaknesses like open ports to gain access.
Application Penetration Tester
1wLove this