Widespread SMS phishing attack thwarted with Cloudflare Zero Trust and YubiKeys

Michael Keane, Zero Trust Product specialist, Cloudflare; Beau Anderson, Solutions Architect, Yubico In July 2022, Cloudflare prevented a breach by an SMS phishing attack that targeted more than 130 companies; these attacks received mainstream media coverage and truly illustrated the vulnerabilities in basic MFA.

While some Cloudflare employees opened the phishing messages, Cloudflare was able to thwart the attack due to the company’s use of Cloudflare Zero Trust paired with modern YubiKey MFA. At Cloudflare, phishing-resistant hardware keys are issued to every employee and required to access all Cloudflare applications.

In this webinar, you will learn:

• Real world examples and values of these joint security technologies
• Best practices for implementation with popular IAM and/or ZTNA platforms
• Learnings from a cross-company deployment
• How physical security keys played a crucial role in not allowing Cloudflare to be another victim in this widespread phishing attack.

Furthermore, discover the broad uses and functionality of YubiKeys, YubiEnterprise Subscription for YubiKey-as-a-Service flexible purchasing, and YubiEnterprise Delivery for fulfillment of physical security keys to distributed workforces.

Presented by: Michael Keane, Zero Trust Product specialist, Cloudflare; Beau Anderson, Solutions Architect, Yubico

Confidentiality and Data Processing:

The information you provide in this form will be held in confidence by Yubico, Inc. and its Affiliates. Any personal information submitted in this form will be used by Yubico, Inc. and its Affiliates, for their performance of this webinar, and as such, you agree to being contacted and receiving relevant marketing materials. “Affiliate” means an entity that, directly or indirectly, controls, is controlled by, or is under common control with Yubico, Inc.