3 ms·
>Socially engineer an employee to get on their VPN (could have been prevented with webauthn / hardware 2fa) Even using certificate based authentication for VPN
by marcinzm 4y ago
>Socially engineer an employee to get on their VPN (could have been prevented with webauthn / hardware 2fa)
Even using certificate based authentication for VPN along with their existing MFA would have prevented this. Unless the attacker compromised the employee's laptop in which case nothing would stop that.