Identity & Access
MFA fatigue attacks fall where number matching is enforced
Push bombing success rates dropped by 90 percent in tenants that require users to type a displayed code.
/ 5 min read
In briefPush bombing success rates dropped by 90 percent in tenants that require users to type a displayed code.
Attackers who already hold a password often send dozens of push prompts hoping the user approves one.
Number matching forces the user to read a code from the login screen, which stops blind approvals. Phishing-resistant keys remove the problem entirely.
Filed under Security ArchitectureIdentity & Access
Does this story affect you?
Tell us about your environment and a SentriXa security editor will get back to you within one business day.