[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nis2\u002F21-2-j":3},{"item":4,"lessons":16,"controls":67,"related":96},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nis2","21-2-j","Article 21(2)(j)","Multi-factor authentication and secured communications (Article 21(2)(j))",0,"Directive (EU) 2022\u002F2555 (NIS2)","**What it asks for.** Point (j) requires, where appropriate, the use of multi-factor or continuous authentication solutions, secured voice, video and text communications, and secured emergency communication systems within the entity.\n\n**In practice.** Multi-factor authentication is enforced for remote access, administrators, email and critical applications, preferably with phishing resistant methods for high risk users. Internal communications use encrypted, managed tools, and an out of band emergency communication channel exists for use when primary systems are compromised. Evidence includes MFA coverage reports, communication tool configurations and tested emergency communication procedures.\n\n**Common gaps.** MFA exceptions for legacy systems and service accounts are common. Few entities have tested how they will communicate if email and chat are unavailable during a crisis.",null,"https:\u002F\u002Feur-lex.europa.eu\u002Flegal-content\u002FEN\u002FTXT\u002FHTML\u002F?uri=CELEX:32022L2555#art_21","Read the official text on EUR-Lex","2026-10-18T15:18:43.664+00:00",{"total":17,"list":18},22,[19,23,27,31,35,39,43,47,51,55,59,63],{"slug":20,"title":21,"published_at":22},"north-korean-deepfake-video-calls-drain-400m-in-crypto","North Korean Deepfake Video Calls Drain $400M in Crypto","2026-11-13T16:23:15.645+00:00",{"slug":24,"title":25,"published_at":26},"stolen-credential-exposes-apify-customer-data-highlighting-mfa-and-secrets-management-gaps","Stolen Credential Exposes Apify Customer Data, Highlighting MFA and Secrets Management Gaps","2026-11-13T13:20:22.45+00:00",{"slug":28,"title":29,"published_at":30},"device-code-phishing-bypasses-mfa-by-abusing-legitimate-microsoft-auth-flow","Device Code Phishing Bypasses MFA by Abusing Legitimate Microsoft Auth Flow","2026-11-13T08:22:33.154+00:00",{"slug":32,"title":33,"published_at":34},"north-korean-social-engineering-nets-billions-from-crypto-exchange","North Korean Social Engineering Nets Billions From Crypto Exchange","2026-11-13T03:20:21.598+00:00",{"slug":36,"title":37,"published_at":38},"north-korean-social-engineering-campaign-steals-12b-via-fake-meetings-and-account-hijacking","North Korean Social Engineering Campaign Steals $1.2B via Fake Meetings and Account Hijacking","2026-11-13T01:20:21.778+00:00",{"slug":40,"title":41,"published_at":42},"stolen-credentials-linked-to-school-bomb-threats-highlight-infostealer-risk","Stolen Credentials Linked to School Bomb Threats Highlight Infostealer Risk","2026-11-13T00:20:55.052+00:00",{"slug":44,"title":45,"published_at":46},"north-korean-hackers-steal-16b-via-social-engineering-and-deepfakes","North Korean Hackers Steal $1.6B via Social Engineering and Deepfakes","2026-11-12T22:20:19.315+00:00",{"slug":48,"title":49,"published_at":50},"stealc-takedown-exposes-millions-of-stolen-credentials-from-everyday-users","StealC Takedown Exposes Millions of Stolen Credentials From Everyday Users","2026-11-12T17:21:32.836+00:00",{"slug":52,"title":53,"published_at":54},"64-million-credentials-stolen-via-malware-kits-targeting-unsuspecting-users","6.4 Million Credentials Stolen via Malware Kits Targeting Unsuspecting Users","2026-11-12T17:20:38.235+00:00",{"slug":56,"title":57,"published_at":58},"blank-access-key-bypass-in-third-party-rmm-plugin-enables-mass-malware-deployment","Blank Access Key Bypass in Third-Party RMM Plugin Enables Mass Malware Deployment","2026-11-12T15:22:36.11+00:00",{"slug":60,"title":61,"published_at":62},"apify-breach-highlights-credential-and-token-security-risks","Apify Breach Highlights Credential and Token Security Risks","2026-11-12T15:21:18.914+00:00",{"slug":64,"title":65,"published_at":66},"hijacked-university-email-account-used-to-send-mass-bomb-hoaxes-across-europe","Hijacked University Email Account Used to Send Mass Bomb Hoaxes Across Europe","2026-11-12T15:21:00.033+00:00",[68,73,78,82,87,91],{"slug":69,"name":70,"problem":71,"stories":72},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",12,{"slug":74,"name":75,"problem":76,"stories":77},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",9,{"slug":79,"name":80,"problem":81,"stories":77},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",{"slug":83,"name":84,"problem":85,"stories":86},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",5,{"slug":88,"name":89,"problem":90,"stories":86},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",{"slug":92,"name":93,"problem":94,"stories":95},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",4,[97,103,108,112,117,122,127,132],{"family":98,"item":99,"code":100,"title":101,"together":102},"cis","14","Control 14","Security Awareness and Skills Training",8,{"family":5,"item":104,"code":105,"title":106,"together":107},"21-2-g","Article 21(2)(g)","Basic cyber hygiene practices and cybersecurity training (Article 21(2)(g))",6,{"family":98,"item":109,"code":110,"title":111,"together":107},"6","Control 6","Access Control Management",{"family":113,"item":114,"code":115,"title":116,"together":86},"nist-csf","pr-aa","PR.AA-01","PR.AA: Identity Management, Authentication, and Access Control",{"family":118,"item":119,"code":120,"title":121,"together":86},"mitre-attack","t1566","T1566","Phishing",{"family":123,"item":124,"code":125,"title":126,"together":95},"nist-800-53","ia-5","IA-5","Authenticator Management",{"family":98,"item":128,"code":129,"title":130,"together":131},"16","Control 16","Application Software Security",3,{"family":118,"item":133,"code":134,"title":135,"together":131},"t1555","T1555","Credentials from Password Stores"]