WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2026 Europe β€’ Jul 10, 2026 β€’ Session details

MFA? Game over! Watch your protection collapse – live

Christoph Menzel

Think your MFA setup is foolproof? Watch a live hack bypass traditional authenticators in minutes, and learn why FIDO2 passkeys are your only real defense against session hijacking.

Pause
Mute Enter Fullscreen
#1 about 5 min

Statistics on password hygiene at home and work

Poor credential management across personal and professional environments creates broad vulnerability architecture.

#2 about 4 min

Common password vulnerabilities and human behavior risks

Easily guessed credentials and a willingness to share information make traditional authentication inherently vulnerable.

#3 about 2 min

Overcoming barriers to passwordless authentication adoption

Replacing traditional credentials with biometrics and cryptographic physical tokens securely shifts the authentication paradigm.

#4 about 5 min

Setting up a man-in-the-middle phishing proxy

Configuring an open-source proxy server automates the creation of convincing fake login portals.

#5 about 4 min

Capturing plain text credentials and session cookies

Interception proxies reliably extract unencrypted usernames and session cookies during the login process.

#6 about 4 min

Bypassing multi-factor authentication with stolen session cookies

Stealing active session tokens allows attackers to bypass secondary application-based authentication measures.

#7 about 4 min

Defending against phishing with hardware passkeys

Using cryptographic hardware keys completely prevents proxy attacks by binding authentication to the real domain.

#8 about 5 min

Shifting organizational security toward phishing-resistant authentication standards

Implementing modern cryptographic protocols neutralizes the inherent weaknesses of traditional password policies and behaviors.

Matching moments

3:06 min

The vulnerability of two-factor authentication to live phishing attacks

PaweΕ‚ Łukaszuk Β· LIVE

6:36 min

Defensive strategies against AI-driven social engineering

Wolfgang Ettlinger +1 Β· World Congress 2023

4:13 min

Hardware keys and mitigating persistent password vulnerabilities

Chris Heilmann +2 Β· LIVE

1:22 min

Securing application access with WebAuthn and physical FIDO keys

Gift Egwuenu Β· World Congress 2023

3:27 min

Introduction to modern authentication and web password vulnerabilities

Gift Egwuenu Β· World Congress 2023

3:23 min

Shortcomings of passwords and secondary authentication factors

Clemens HΓΌbner Clemens HΓΌbner Β· World Congress 2023

More from World Congress 2026 Europe

Building the Nervous System of AI - Michael Kagan (NVIDIA) thumbnail
29:17
about 2 months ago

Building the Nervous System of AI - Michael Kagan (NVIDIA)

Michael Kagan, Sead Ahmetović

Five Things in Tech that Matter Now - WeAreDevelopers World Congress 2026 Closing Keynote thumbnail
19:41
about 2 months ago

Five Things in Tech that Matter Now - WeAreDevelopers World Congress 2026 Closing Keynote

Christian Heilmann

The Sound of Your Secrets: Teaching Your Model to Spy, So You Can Learn to Defend thumbnail
32:06
about 2 months ago

The Sound of Your Secrets: Teaching Your Model to Spy, So You Can Learn to Defend

David vonThenen

Super scaling for the Super Bowl: How to survive 30 million users hitting your backend in 30 minutes thumbnail
35:13
about 2 months ago

Super scaling for the Super Bowl: How to survive 30 million users hitting your backend in 30 minutes

Irina Branovic

Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬 thumbnail
24:23
about 2 months ago

Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬

Jeremy Murray

Angstfreude - AI and Corporate Culture - The Thrill and the Threat thumbnail
30:26
about 2 months ago

Angstfreude - AI and Corporate Culture - The Thrill and the Threat

Axel Ebert, Karin Krobath

Upcoming sessions on this topic

Open session

World Congress 2026 North America

September 25, 2026 Β· 11:00–11:30

Stage 6

Secure-by-Inclusion: Preventing Accessibility Barriers from Becoming Security Vulnerabilities

Radostina (Ina) Tsvetkova

Norwegian Directorate of Labour and Welfare (NAV), Senior Advisor in Digital Accessibility and Inclusive Design

Radostina (Ina) Tsvetkova
Open session

World Congress 2026 North America

September 24, 2026 Β· 17:30–18:00

Stage 5

Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale

Abdel Fane

Founder of OpenA2A

Abdel Fane
Open session

World Congress 2026 North America

September 25, 2026 Β· 16:50–17:20

Stage 5

The Things Your AI Isn't Telling You

Desmond Lamptey

Lead Software Engineer at Capital One

Desmond Lamptey
Open session

World Congress 2026 North America

September 24, 2026 Β· 14:25–14:35

Outdoor Stage

SecurePrompt: Building a Pre-Flight Security Layer for Agentic AI

Ravi Sastry Kadali

AI/ML Engineer at General Motors

Ravi Sastry Kadali
Open session

World Congress 2026 North America

September 24, 2026 Β· 12:15–12:45

Stage 6

AI vs. AI: Defending the open source supply chain with agentic workflows

Manfred Moser

Senior Principal DevRel Engineer at Chainguard

Manfred Moser
Open session

World Congress 2026 North America

September 25, 2026 Β· 13:30–14:00

Stage 9

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy

Related videos

Going Beyond Passwords: The Future of User Authentication thumbnail
27:55
World Congress 2023 β€’ almost 3 years ago

Going Beyond Passwords: The Future of User Authentication

Gift Egwuenu

No More Post-its: Boost your login security with APIs thumbnail
16:05
World Congress 2024 β€’ about 2 years ago

No More Post-its: Boost your login security with APIs

Alvaro Navarro

Passwordless Web 1.5 thumbnail
30:21
LIVE β€’ almost 2 years ago

Passwordless Web 1.5

PaweΕ‚ Łukaszuk

Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls thumbnail
31:16
World Congress 2026 Europe β€’ 2 months ago

Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls

Martina Kraus

Passwordless future: WebAuthn and Passkeys in practice thumbnail
32:32
World Congress 2023 β€’ almost 3 years ago

Passwordless future: WebAuthn and Passkeys in practice

Clemens HΓΌbner

Skynet wants your Passwords! The Role of AI in Automating Social Engineering thumbnail
31:19
World Congress 2023 β€’ almost 3 years ago

Skynet wants your Passwords! The Role of AI in Automating Social Engineering

Wolfgang Ettlinger, Alexander Hurbean

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.