Another good reason to enforce MFA

A recent cyber security investigation uncovered a large data-theft campaign. Sensitive business information was quietly collected and later sold online. The common thread across all affected organisations was simple: Staff were allowed to access important cloud systems using only a password. In many cases, those passwords had been stolen years earlier by hidden “infostealing” malware on work or personal devices. They were still valid because they’d never been changed or locked down.