MFA Prompt Bombing: Why Your Second Factor Isn't Saving You
MFA Prompt Bombing: Why Your Second Factor Isn't Saving You
26 May 2026
Multi-factor authentication (MFA) was supposed to close a critical gap in identity security. It meant that, even if an attacker possessed the account credentials, they couldn't log in without the second factor. While that logic was sound, attackers have now figured out that they don't need to steal the second factor: they just need the user to hand it over.
If your workforce authenticates with