Google Simplifies 2-Factor Authentication Setup (It's More Important Than Ever)

Google has simplified enabling two-factor authentication and passkeys while research from Silverfort demonstrates an adversary-in-the-middle attack that can hijack FIDO2/SSO sessions by stealing unbound session cookies, allowing attackers to bypass modern authentication; mitigations recommended include token binding and Chrome's Device Bound Session Credentials.