2FAFail

@bert_hubert : nog enkele "puntjes":

• Elke medewerker die op een cloud- in plaats van een locaal account moet inloggen, wordt een SPOF (Single Point Of Failure) voor informatiebeveiliging (voorbeeld: https://www.security.nl/posting/859906/Speculatie+over+Politie-hack#posting860679).

• Microsoft's Authenticator app beschermt niet tegen steeds meer phishingsites ("evil proxies"): https://techcommunity.microsoft.com/t5/microsoft-entra-azure-ad-blog/all-your-creds-are-belong-to-us/ba-p/855124

• SOC's (Security Operations Centres) kunnen bij het vuilnis en je bent afhankelijk van de cloudprovider voor jouw logs (https://www.security.nl/posting/862564/Microsoft+verliest+door+bug+weken+aan+beveiligingslogs+van+klanten).

Don't rely on 2FA!

Instead use a trustworthy & secure pwmgr (password manager) that checks the domain name (like passkeys do implicitly) and, based on that, offers to autofill credentials.

And:
• Let the pwmgr generate random long unique passwords for each account;

• Back up the pw db (database) after each change (and have multiple physical locations where those back ups are stored);

• Know what to do when logging in to a website and your pwmgr comes up with *NOTHING* : don't search for credentials in de pw db for the website you were made to *believe* it is - it's fake.

<<< The phishing page, for its part, urges the victim to sign in with Microsoft Outlook or Office 365 (now Microsoft 365) to view a purported PDF document. Should they follow through, fake sign-in pages hosted on Cloudflare Workers are used to harvest their credentials and multi-factor authentication (MFA) codes. >>> https://thehackernews.com/2024/05/new-tricks-in-phishing-playbook.html

@patrickcmiller