happy to see "Lack of Phishing-Resistant MFA" added to the top 10 here. Moving away from SMS / Push to App MFA to something like a yubikey is a major upgrade to

happy to see "Lack of Phishing-Resistant MFA" added to the top 10 here. Moving away from SMS / Push to App MFA to something like a yubikey is a major upgrade to operational security.