CFOtech Canada - Technology news for CFOs & financial decision-makers
Canada
Canadian Edition · 2026

The Ultimate Guide to Multi-factor authentication

A curated Canadian edition of TechDay news, analysis, interviews, reviews, job moves, and related resources for Multi-factor authentication (MFA).

What to know about Multi-factor authentication

Multi-factor authentication (MFA) is a cybersecurity process that requires users to present multiple forms of verification before gaining access to systems or data, significantly reducing the risk of unauthorized access. With cyber threats on the rise, including data breaches, ransomware, and phishing attacks targeting both individuals and organisations, MFA has become a critical component in digital security strategies.

Recent developments highlight the expanding adoption of MFA across various industries and technologies, from cloud services and identity management platforms to hardware-based security keys and biometric authentication methods. MFA solutions continue to evolve, addressing challenges such as ease of use, phishing resistance, and integration with emerging technologies like AI and cloud computing.

For readers interested in understanding how MFA strengthens digital security, mitigates risks associated with compromised credentials, and supports compliance with cybersecurity standards, these stories offer valuable insights. Exploring MFA-related topics can help individuals and organisations make informed decisions on implementing robust, adaptive authentication measures to protect sensitive information in an increasingly connected world.

Canadian Multi-factor authentication News

Regional stories with direct local relevance

Analyst Insights

Research and market analysis connected to Multi-factor authentication

Expert Columns

Interviews

Interviews and video coverage from the network

Recent Multi-factor authentication News

Cisco unveils Duo IAM to strengthen identity-based security
Breach Prevention

Cisco unveils Duo IAM to strengthen identity-based security

Cisco launches Duo IAM, a new identity and access management tool designed to combat AI-driven cyber threats with stronger, passwordless security features.

Thu, 29th May 2025

Experts warn of AI risks & password sharing on security
Cyber Threat

Experts warn of AI risks & password sharing on security

On World Password Day, experts warn that password sharing and AI-generated credentials are weakening digital security globally, urging stronger authentication methods.

Thu, 1st May 2025

Flare reveals costly impact of account takeover attacks
Cybercriminals

Flare reveals costly impact of account takeover attacks

Flare's latest report reveals a staggering rise in account takeover attacks, exposing organisations to losses of tens of millions annually due to session hijacking.

Thu, 10th Apr 2025

Ecommerce fraud pressure rises 33% as AI fuels attacks
Risk & Compliance

Ecommerce fraud pressure rises 33% as AI fuels attacks

Account takeover and card-testing attacks surged as AI lowered the cost and speed of scams, raising pressure on online retailers.

Today

Google Cloud outlines targeted response to cyber threats
Privileged Access Management

Google Cloud outlines targeted response to cyber threats

Customers will face narrower disruptions as Google Cloud moves to throttle malicious traffic, isolate risky identities and preserve legitimate usage.

Today

Google links UNC6671 to cloud extortion brand shift
Virtual Private Networks

Google links UNC6671 to cloud extortion brand shift

Google says the campaign is shifting towards financial and legal firms, with rebranded extortion sites still stealing cloud logins and tokens.

Last week

Logokit phishing kit builds real-time fake login pages
Threat intelligence

Logokit phishing kit builds real-time fake login pages

Victims can be tricked more easily as Logokit now tailors fake login pages in real time, sending stolen credentials to Telegram bots.

Last month

Compromised credential monitoring lags threat awareness
Risk & Compliance

Compromised credential monitoring lags threat awareness

Despite widespread concern over stolen logins, only 19% of organisations continuously monitor and automatically remediate exposed credentials.

Last month

Attackers exploit trusted credentials in email fraud surge
Virtual Private Networks

Attackers exploit trusted credentials in email fraud surge

Email fraud is now the top incident type, accounting for 45% of cases as attackers bypass multi-factor authentication with stolen credentials.

Last month

APT28-linked campaign hijacks hotel Wi-Fi for logins
Virtual Private Networks

APT28-linked campaign hijacks hotel Wi-Fi for logins

Corporate travellers at hotels and conference centres were quietly sent to fake Microsoft 365 pages after attackers took over guest Wi-Fi gateways.

Last month

Manufacturers face new cyber risks from connected factories
Threat intelligence

Manufacturers face new cyber risks from connected factories

Connected factory networks are widening the attack surface, with SonicWall warning that old flaws and weak access controls can expose production systems.

Last month

Two-thirds of firms delay Copilot over SharePoint risks
Human Capital Management

Two-thirds of firms delay Copilot over SharePoint risks

Worries over exposed SharePoint data have led many businesses to pause Microsoft Copilot, with senior executives the most cautious.

Last month

Phishing campaign targets universities & EU bodies
Threat intelligence

Phishing campaign targets universities & EU bodies

Researchers warn the campaign can bypass multi-factor authentication, putting university and EU-linked accounts at risk of real-time takeover.

Last month

Microsoft tops brand phishing list in Q2 2026 report
Software Updates

Microsoft tops brand phishing list in Q2 2026 report

Attacks are increasingly concentrating on a handful of familiar brands, with Microsoft alone accounting for 23% of phishing attempts in Q2 2026.

Last month

Synology launches Surveillance365 for multi-site firms
Disaster Recovery

Synology launches Surveillance365 for multi-site firms

Businesses running multiple sites can now manage camera networks without on-site servers, as Synology rolls out a cloud service worldwide.

Last month

Yubico's YubiKey 5.8 adds digital signing features
Identity and Access Management

Yubico's YubiKey 5.8 adds digital signing features

The update could let companies use a single security key to approve payments, documents and AI actions without custom cryptography.

Last month

1Password launches Claude browser login for AI agents
Biometrics

1Password launches Claude browser login for AI agents

The update lets AI agents sign in without seeing passwords, easing a major security hurdle for firms automating browser tasks.

Last month

WhatsApp GhostPairing attack gives intruders access
Threat intelligence

WhatsApp GhostPairing attack gives intruders access

Attackers can stay inside WhatsApp accounts after a single fake device approval, exposing messages, calls and contacts without alerts.

Last month

Phishing toolkits target Microsoft 365 MFA in surge
Security Operations Centres

Phishing toolkits target Microsoft 365 MFA in surge

Account takeovers are becoming harder to stop as attackers use real-time code theft and fake login pages to bypass Microsoft 365 MFA.

Last month

SonicWall urges focus on patch speed over CVE count
Patching

SonicWall urges focus on patch speed over CVE count

The real risk lies in unpatched flaws, as attackers increasingly exploit fixes already available but not yet installed.

Last month