Let users know about MFA fatigue and be accepting when an incident occurs. Security awareness should go together with these modifications. The point is to reduce the overall number of pushes, so when there is a notification, it’s more noticeable. Techniques include setting MFA to only remember a multifactor for a few hours and using single sign-on capabilities. “One of the first things an organization can do is evaluate their multifactor solution to reduce how often someone needs to authenticate,” Goerlich advises. It may only need a little tweaking because it’s doing what you want users to do: Authenticate their identity. So, how can you protect your organization against these threats?įirst, don’t throw away your MFA solution. Rather, it’s a case of attackers finding new ways to evolve their tactics.

Neither the individual nor the organization has done anything wrong.

This occurs when the attacker “sends a user multiple push notifications in the hopes that they will click and approve a request - either out of muscle memory, thinking they must have logged into an application, or simply out of hope that they will stop getting these notifications,” says Goerlich. Their latest tactic involves creating multifactor authentication (MFA) fatigue. Wolfgang Goerlich, Advisory CISO at Cisco. “Anyone who has been in security long enough recognizes that every time we make a taller wall or a stronger door, someone comes up with a taller ladder or a better battering ram,” says said J. They will continue to target end-users, as people are cheaper and easier to exploit than systems. Security awareness training - combined with the right technologies - have done a great job of alerting employees to the risks of phishing scams and clicking on suspicious links.īut criminals are relentless and brutally crafty.

Mfa cisco