Security News Rogue external MFA providers can steal passwords during logins BleepingComputer Daniel Bender 22 Sep 2026 Share Security researchers developed an attack that lets hackers with privileged access register a rogue external MFA provider that steals users' passwords during legitimate login attempts.