Retool hack (Incident)

This Retool blog post argues that many commonly deployed MFA methods are not sufficiently phishing-resistant and can provide a false sense of security; it recommends evaluating threat models, adopting stronger factors (such as hardware security keys and protocols like FIDO2/WebAuthn), and ensuring account recovery and fallback mechanisms do not undermine overall authentication security.