Spriv blog · Category
Threat research
Breach reports and attack campaigns read through an authentication lens.
What the 2026 breach reports say about MFA
Verizon's 2026 DBIR and Sophos' 2026 Active Adversary Report point the same way: attackers go after identity, and missing or misconfigured MFA keeps letting them in.
Read the post →
When the help desk becomes the attack surface: MFA resets and social engineering
The attacks on Marks & Spencer and Co-op in 2025 began with a phone call to a service desk, not a software exploit. The strongest MFA is only as strong as the process that resets it.
Read the post →
Checkit!
MFA your team will leave switched on
Two free users, two free servers, no credit card. Install in under five minutes.