Rogue external MFA providers can steal passwords during logins

Cybersecurity brief from BleepingComputer.

From the source

Security researchers developed an attack that lets hackers with privileged access register a rogue external MFA provider that steals users' passwords during legitimate login attempts. […]

Why it is on APerez.net

This belongs in the security stream because it can affect how systems are defended, operated, patched, monitored, or trusted. The source link below has the complete reporting and technical details.

This APerez.net Wire Brief is an automatically created digest from an RSS item. It does not republish the full source article.