CISA Releases Guidance on Phishing-Resistant Multi-Factor Authentication

Yesterday, the Cybersecurity and Infrastructure Security Agency (CISA) published two fact sheets to highlight threats against accounts and systems using certain forms of multifactor authentication (MFA). The first fact sheet covers phishing-resistant MFA, which CISA calls the most secure form of MFA, and provides information on how organizations can implement it. The second fact sheet covers number matching MFA, which CISA considers weaker than phishing-resistance MFA but a good interim system to move to as part of a transition to the strongest form of MFA, and how organizations can implement it. CISA strongly urges all organizations to move to one of these two forms of MFA. Find out more information at CISA.