Security News MFA's Weakest Link: Account Recovery Is the New Attack Path BleepingComputer Daniel Bender 09 Sep 2026 Share MFA makes account takeover harder, but attackers are increasingly targeting the recovery processes used to reset passwords and authentication methods. Specops explains why stronger identity verification at the service desk is critical to preventing social engineering attacks from turning account recovery into account takeover.