
Session details
Multi-factor authentication (MFA) has long been a cornerstone of identity security—but with the rise of sophisticated phishing attacks, MFA fatigue, and session hijacking, many organisations are questioning whether it still provides sufficient protection. As identity becomes the primary attack vector, simply “adding a second factor” is no longer enough.
This session explores how organisations are evolving beyond traditional MFA toward more adaptive, risk-based and phishing-resistant authentication strategies. We’ll examine the shift to passwordless approaches, the role of device trust and behavioural signals, and how MFA fits within a broader Zero Trust architecture. Join this session to understand where MFA still delivers value, where it falls short, and what modern authentication should look like in 2026.



