3 ms·
That's why we have now 2FA enabled on most external access, VPN included.
by ale42 2y ago
That's why we have now 2FA enabled on most external access, VPN included.
- jamespo 2y agoAmazing they don't have 2FA on VPN, even if you don't go for yubikey/phone app you could at least require a cert.
- kmoser 2y ago> As far as we can tell [...] the phish spam attacker used the main password they'd just stolen to register the person for our VPN and obtain a VPN password... Requiring admin approval for VPN accounts would have prevented the phisher from getting VPN access to begin with.