And this is still true today. However, a sharp increase in adversary-in-the-middle (AiTM) attacks means that MFA alone may no longer be enough. Our annual State of the Threat Report highlighted a ...

"In reviewing the implementation of several of the most popular software service's passkey authentication flow, nearly all of them can still be bypassed by AitM phishing, using authentication ...