The Ultimate Guide to Multi-factor authentication
A curated Kiwi edition of TechDay news, analysis, interviews, reviews, job moves, and related resources for Multi-factor authentication (MFA).
What to know about Multi-factor authentication
Multi-factor authentication (MFA) is a cybersecurity process that requires users to present multiple forms of verification before gaining access to systems or data, significantly reducing the risk of unauthorized access. With cyber threats on the rise, including data breaches, ransomware, and phishing attacks targeting both individuals and organisations, MFA has become a critical component in digital security strategies.
Recent developments highlight the expanding adoption of MFA across various industries and technologies, from cloud services and identity management platforms to hardware-based security keys and biometric authentication methods. MFA solutions continue to evolve, addressing challenges such as ease of use, phishing resistance, and integration with emerging technologies like AI and cloud computing.
For readers interested in understanding how MFA strengthens digital security, mitigates risks associated with compromised credentials, and supports compliance with cybersecurity standards, these stories offer valuable insights. Exploring MFA-related topics can help individuals and organisations make informed decisions on implementing robust, adaptive authentication measures to protect sensitive information in an increasingly connected world.
Kiwi Multi-factor authentication News
Regional stories with direct local relevance
Hatch warns customers of DriveWealth data exposure
Customer contact details and portfolio data were exposed in a breach at Hatch's US broker partner, though no holdings or transactions were affected.
New Zealand SMEs face rising cyber threats, study finds
Nearly three-quarters of medium-sized firms have faced a cyber threat in six months, as AI scams and weak staff training heighten risk.
Westpac first New Zealand bank to issue digital ID
Business customers can now verify bank account details faster and with less fraud risk as digital credentials debut through Govt.nz's app wallet.
Authsignal launches digital credential checks in NZ
Businesses in New Zealand can now verify wallet-held IDs on one integration, with age checks possible without revealing full identity.
iPayroll mandates 2FA security for employee logins
Employees now need a second verification step to reach payroll data as iPayroll tightens defences amid rising cyber incidents in New Zealand.
Cyber criminals are not breaking in - they're logging in
Breaches across New Zealand are increasingly exploiting human trust, with thieves using logins and one-time codes to steal data and funds.
Analyst Insights
Research and market analysis connected to Multi-factor authentication
Authsignal launches digital credential checks in NZ
Deepfake fraud attacks rise 180% as identity checks fail
Mandiant study finds USD $4.3 million annual benefit
Gartner says 40% of governments will create TrustOps
Infobip launches AgentOS platform, targets agentic AI shift
Featured News
Expert Columns
Mathspace Breach Exposes 1 Million Students, Parents, and Teachers
Weaponizing trust: How AI and social engineering bypass personal security boundaries
Why You Need Phone Validation in Your Customer Data Toolkit
When AI accelerates the threat, identity governance cannot afford to stand still
Identity the new security perimeter in the age of autonomous AI
The Hidden Cost of Identity Friction in Retail
Only 14% of business leaders have full OT visibility - why it's time to take a more honest view of risk
How can phishing-resistant authentication strengthen AML compliance across the accounting sector?
Cyber criminals are not breaking in - they're logging in
Cyber hygiene 101: The big fundamentals
Interviews
Interviews and video coverage from the network
Recent Multi-factor authentication News
Blackpoint adds identity threat tools to CompassOne
The update gives Microsoft 365, Google Workspace and Cisco Duo users faster containment and clearer evidence as identity attacks rise.
Akira exploits two-year-old SonicWall flaw, ThreatDown says
Thousands of exposed SonicWall devices still give Akira ransomware a route in, as patched systems with old credentials remain a live risk.
Barracuda spots blob URL phishing in Microsoft browser
Security teams may miss the attack because it leaves no persistent phishing site, instead building fake Microsoft login pages inside the browser.
Okta launches Auth0 tools for AI agents & B2B logins
AI shopping and enterprise logins are driving Okta's latest Auth0 roll-out, as businesses seek tighter identity controls without slowing sales.
OneAdvanced launches AI risk platform in Australia
Organisations facing tougher compliance checks in Australia and New Zealand can now swap spreadsheet risk logs for AI-guided assessments and reports.
AI-generated cyber attacks to hit firms soon, warn experts
Many firms lack the capacity to fix existing flaws fast enough, leaving them exposed as AI-generated attacks scale up, experts warn.
Microsoft 365 readiness gaps worry MSPs as AI demand grows
Only 3% of MSPs said every client tenant is Copilot-ready, despite AI governance becoming the fastest-growing request.
Security leaders overconfident as authentication lags
Most firms have not meaningfully upgraded authentication for years, despite rising identity-breach risks and an estimated USD $4.4 million hit per breach.
Infobip launches SIM-based number verification for operators
The new service could help mobile operators earn from identity services as businesses seek safer alternatives to one-time passwords.
Google Cloud urges stronger cyber basics amid AI attacks
As attackers use AI to speed up phishing and malware, companies are being told that multi-factor authentication and patching matter more than ever.
Cloud security report finds gaps differ by provider
Multi-cloud security teams face different risks on AWS, Azure and Google Cloud, with misconfigurations high across all three providers.
Ecommerce fraud pressure rises 33% as AI fuels attacks
Account takeover and card-testing attacks surged as AI lowered the cost and speed of scams, raising pressure on online retailers.
Google Cloud outlines targeted response to cyber threats
Customers will face narrower disruptions as Google Cloud moves to throttle malicious traffic, isolate risky identities and preserve legitimate usage.
Google links UNC6671 to cloud extortion brand shift
Google says the campaign is shifting towards financial and legal firms, with rebranded extortion sites still stealing cloud logins and tokens.
Zero Trust drives biometrics in physical access security
The shift could leave sites exposed unless firms match cyber defences with repeated identity checks at doors and restricted rooms.
Logokit phishing kit builds real-time fake login pages
Victims can be tricked more easily as Logokit now tailors fake login pages in real time, sending stolen credentials to Telegram bots.
Compromised credential monitoring lags threat awareness
Despite widespread concern over stolen logins, only 19% of organisations continuously monitor and automatically remediate exposed credentials.
Zyxel expands security governance for SMB networking
SMBs and managed service providers gain clearer patching and support timelines as Zyxel moves to meet rising cyber and regulatory scrutiny.
Attackers exploit trusted credentials in email fraud surge
Email fraud is now the top incident type, accounting for 45% of cases as attackers bypass multi-factor authentication with stolen credentials.
APT28-linked campaign hijacks hotel Wi-Fi for logins
Corporate travellers at hotels and conference centres were quietly sent to fake Microsoft 365 pages after attackers took over guest Wi-Fi gateways.