Is Your MFA Enough? Lessons from the FBI’s Operation Winter SHIELD

By signing up you will receive marketing emails from Yubico for security products and services; unsubscribe here or via a link in the email anytime and free of charge.

Stop reacting to breaches and start preventing them. Despite widespread MFA adoption, credential-based attacks are evolving, bypassing legacy "push" and SMS codes with ease. The FBI’s recent Operation Winter SHIELD and their 10 Actions to Improve Cyber Resiliency serve as a critical wake-up call: it is no longer enough to just have MFA—it must be phishing-resistant.

Join Yubico’s David Treece, a veteran in identity standards, and Caitlin Clarke, Sr. Director at Venable LLP and former National Security Council lead, as they deconstruct the FBI’s latest directives. Our experts will bridge the gap between federal policy and technical execution, providing a roadmap for organizations holding sensitive data to eliminate account takeovers for good.

What you will learn:

• The Operation Winter SHIELD Breakdown: An inside look at the FBI’s recommendations and what they mean for your risk profile.
• The "Why" Behind Phishing-Resistance: Why the FBI is specifically mandating a move away from legacy MFA.
• Actionable Implementation: Practical steps to adopt passwordless, phishing-resistant protocols like FIDO2/WebAuthn.
• Compliance & Strategy: How to align your security architecture with government and industry best practices.

Speaker Expertise Highlights:

• David Treece (VP, Business Development, Yubico): With over 20 years of experience in IAM architecture, David works directly with regulatory bodies and the FIDO Alliance to define the global standards for secure identity. He brings the technical "how-to" for enterprise-wide deployment.
• Caitlin Clarke (Sr. Director, Cybersecurity Services, Venable LLP): A seasoned policymaker formerly with the White House National Security Council, Caitlin led federal interagency coordination for cyber defense. She provides a unique perspective on how national security policy translates into organizational compliance and risk management.