Stay Safe Online: How Two-Factor Authentication Works and Its Limits
In the past, authentication was just a login step. But as cybercrime has become more sophisticated, the role of authentication has grown. Now, the majority of breaches do not start with malware. They start with stolen credentials or access to an active session. Attackers can gain access to systems even when multi-factor authentication is in place. They use phishing to obtain login credentials or to send repeated approval requests. In some cases, they take over sessions by stealing the session token.
