NOT ALL TYPES OF MFA ARE CREATED EQUAL

Summary from the TLDR InfoSec newsletter

The UK's NCSC has released updated MFA guidance to address new threats. Foremost in its guidance, the NCSC recommends using phishing-resistant factors. Additionally, the NCSC recommends only prompting for MFA when necessary and provides an example of utilizing MDM-managed laptops and mobile devices as a factor instead of requiring a prompt.