#564: Hackers can bypass Your MFA In 2026 (And How To Stop It)

Thank you to ThreatLocker for sponsoring my trip to ZTW26 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombalAre your passwords and 2FA enough to stop a modern cyber attack? In this interview, Rob fromThreatLocker breaks down the dangerous reality of password reuse, SIM swapping, and whytraditional SMS MFA is no longer bulletproof.We dive deep into how threat actors use reverse proxies like Evilginx to steal session cookies, allowing them to bypass multi-factor authentication and hijack your accounts without ever needing your password.Discover why relying on legacy VPNs and leaving firewall ports open to the internet massivelyincreases your attack surface, leaving your organization just one brute-force attack away fromransomware. Finally, we explore the mechanics of ThreatLocker’s Zero Trust Network Accessand Cloud Access, detailing how denying by default and routing through secure proxies can lockdown Microsoft 365 and make your internal network effectively invisible to hackers.// Rob Allen’s SOCIAL //LinkedIn: / threatlockerrob X: https://x.com/threatlockerrob// David's SOCIAL //Discord: discord.com/invite/usKSyzbTwitter: www.twitter.com/davidbombalInstagram: www.instagram.com/davidbombalLinkedIn: www.linkedin.com/in/davidbombalFacebook: www.facebook.com/davidbombal.coTikTok: tiktok.com/@davidbombalYouTube: / @davidbombalSpotify: open.spotify.com/show/3f6k6gE...SoundCloud: / davidbombalApple Podcast: podcasts.apple.com/us/podcast...// MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: [email protected]// MENU //0:00 - Coming up0:57 - What is 2FA/MFA and why is it important?02:54 - Reusing passwords04:38 - Malicious Chrome extensions05:39 - Average person vs cybersecurity12:18 - SMS 2FA13:37 - Authenticator apps16:26 - Yubikeys17:58 - No one is "unhackable"21:52 - "Cookie stealing" explained22:53 - ThrearLocker's new tool/solution28:22 - How ThreatLocker protects Office36529:06 - ThreatLocker protecting organizations33:11 - Should I trust ThreatLocker?35:54 - How safe is ThreatLocker?38:00 - ConclusionPlease note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only.#cybersecurity #hacker #hack