identity
Rogue external MFA providers can steal passwords during logins
September 23, 2026
Back to all postsSecurity researchers developed an attack that lets hackers with privileged access register a rogue external MFA provider that steals users' passwords during legitimate login attempts.
Source: BleepingComputer
identity
Concerned about this threat to your business?
We help Canadian SMBs deploy the controls discussed in this article. Free 30-minute assessment — no obligation.