@thefluffypurringbeast@tech.lgbtOne topic that comes up at least weekly in my job is Multi Factor Authentication #MFA. Often I am asked about what method is secure. Finally I can tell them #Fido2 / #WebAuthn , forget sms, voice or #TOTP ...and by the way, you can read it here #CISAgov https://www.cisa.gov/uscert/ncas/current-activity/2022/10/31/cisa-releases-guidance-phishing-resistant-and-numbers-matching
www.cisa.govCISA Releases Guidance on Phishing-Resistant and Numbers Matching Multifactor Authentication | CISACISA has released two fact sheets to highlight threats against accounts and systems using certain forms of multifactor authentication (MFA). CISA strongly urges all organizations to implement phishing-resistant MFA to protect against phishing and other known cyber threats. If an organization using mobile push-notification-based MFA is unable to implement phishing-resistant MFA, CISA recommends using number matching to mitigate MFA fatigue.