Cybersecurity Insights with Contrast CISO David Lindner | 6/14/24

Insight #1

How many breaches do we need to endure before we realize that multifactor authentication (MFA) is the most important factor in preventing the successful use of compromised credentials in data breaches? As noted in Verizon’s Data Breach Investigations Report (DBIR) 2024, nearly 38 percent of analyzed breaches used stolen credentials — more than double the breaches that used phishing (15%) and far more than those that leveraged vulnerability exploitation (4%). Examples include Change Healthcare — which wasn’t using MFA — and Ticketmaster-Snowflake, which appeared to suffer “a targeted campaign directed at users with single-factor authentication” wherein the threat actors leveraged previously obtained credentials. We can do better.

*** This is a Security Bloggers Network syndicated blog from AppSec Observer authored by David Lindner, Director, Application Security. Read the original post at: https://www.contrastsecurity.com/security-influencers/cybersecurity-insights-with-contrast-ciso-david-lindner-2024-06-14