Year in Review: Attacks on identity and MFA

Cisco Talos’ 2024 Year in Review spotlight highlights how identity became the pivot for attacks, with valid-account abuse leading intrusions and nearly half involving Active Directory; it details common MFA missteps (lack of enrollment, misconfigured policies) and attacker bypass methods (phishing, push fatigue, push spraying, adversary-in-the-middle), and points to a podcast featuring Cisco Duo’s Steven Leung with best-practice recommendations for deploying MFA at scale without increasing user friction.