My third party app was the weak link in a 2FA setup

Last month I found out the hard way that using a third party authenticator app that syncs to the cloud can undo your whole 2FA plan. A buddy of mine, Dave, got his Microsoft account wiped because his authenticator had cloud backup and someone phished those credentials in a separate breach. We were at a coffee shop in Austin when he showed me the whole attack chain. Anyone else moved away from cloud synced authenticators after a scare like this?

0 comments

Log in to join the discussion

Log In

0 Comments

No comments yet

Be the first to share your thoughts on this discussion.