Microsoft makes multi-factor authentication (MFA) mandatory for all Azure accounts following recent cyberattack

[Firewaller]

 

In a decisive move to bolster cloud security, Microsoft has announced the enforcement of multi-factor authentication (MFA) for all Azure users. This mandatory measure, part of the Secure Future Initiative, is set to commence in July 2024, with full enforcement anticipated by early 2025. This development comes after the tech giant revealed that a targeted DDoS attack caused a massive Azure outage weeks ago.

 

The implementation of MFA is a critical step in Microsoft’s commitment to enhancing security across its services. This commitment is further underscored by the tech giant’s pledge to invest $20 billion in security over the next five years. The MFA requirement is designed to reduce the risk of unauthorized access and data breaches1, a concern that has been amplified by the increasing frequency and sophistication of cyberattacks.

 

Microsoft’s MFA enforcement is not just about securing Azure sign-ins. It’s also about compliance with several security standards and regulations, such as the Payment Card Industry Data Security Standard (PCI DSS), Health Insurance Portability and Accountability Act (HIPAA), General Data Protection Regulation (GDPR), and National Institute of Standards and Technology (NIST).

 

The roll-out of MFA will be phased, and administrators are urged to activate MFA now to ensure seamless compliance and avoid disruptions. By October 15, 2024, users will need to use MFA to sign into the Azure portal, Microsoft Entra admin center, and Intune admin center.

 

Microsoft’s research indicates that MFA can block more than 99.2% of account compromise attacks, making it one of the most effective security measures available. This move brings us all one step closer to a more secure future.

 

 

Read more:

• https://azure.microsoft.com/en-us/blog/announcing-mandatory-multi-factor-authentication-for-azure-sign-in/
• https://techcommunity.microsoft.com/t5/intune-customer-success/support-tip-enforcement-of-multifactor-authentication-for-intune/ba-p/4220014
• https://www.microsoft.com/en-us/industry/microsoft-in-business/security/2021/09/23/microsoft-expands-on-cybersecurity-commitments-for-u-s-government-agencies/

 

Image: Mikhail Primakov | Dreamstime.com