World Congress 2026 Europe • Jul 10, 2026 • Session details

MFA? Game over! Watch your protection collapse – live

Christoph Menzel

Think your MFA setup is foolproof? Watch a live hack bypass traditional authenticators in minutes, and learn why FIDO2 passkeys are your only real defense against session hijacking.

Pause

Mute

Enter Fullscreen

#1 about 5 min

Statistics on password hygiene at home and work

Poor credential management across personal and professional environments creates broad vulnerability architecture.

#2 about 4 min

Common password vulnerabilities and human behavior risks

Easily guessed credentials and a willingness to share information make traditional authentication inherently vulnerable.

#3 about 2 min

Overcoming barriers to passwordless authentication adoption

Replacing traditional credentials with biometrics and cryptographic physical tokens securely shifts the authentication paradigm.

#4 about 5 min

Setting up a man-in-the-middle phishing proxy

Configuring an open-source proxy server automates the creation of convincing fake login portals.

#5 about 4 min

Capturing plain text credentials and session cookies

Interception proxies reliably extract unencrypted usernames and session cookies during the login process.

#6 about 4 min

Bypassing multi-factor authentication with stolen session cookies

Stealing active session tokens allows attackers to bypass secondary application-based authentication measures.

#7 about 4 min

Defending against phishing with hardware passkeys

Using cryptographic hardware keys completely prevents proxy attacks by binding authentication to the real domain.

#8 about 5 min

Shifting organizational security toward phishing-resistant authentication standards

Implementing modern cryptographic protocols neutralizes the inherent weaknesses of traditional password policies and behaviors.

Matching moments

3:06 min

The vulnerability of two-factor authentication to live phishing attacks

Paweł Łukaszuk · LIVE

6:36 min

Defensive strategies against AI-driven social engineering

Wolfgang Ettlinger +1 · WWC 2023

4:13 min

Hardware keys and mitigating persistent password vulnerabilities

Chris Heilmann +2 · LIVE

1:22 min

Securing application access with WebAuthn and physical FIDO keys

Gift Egwuenu · WWC 2023

3:27 min

Introduction to modern authentication and web password vulnerabilities

Gift Egwuenu · WWC 2023

3:23 min

Shortcomings of passwords and secondary authentication factors

Clemens Hübner

Clemens Hübner · WWC 2023

More from World Congress 2026 Europe

Building the Nervous System of AI - Michael Kagan (NVIDIA) thumbnail

about 1 month ago

Building the Nervous System of AI - Michael Kagan (NVIDIA)

Michael Kagan, Sead Ahmetović

Five Things in Tech that Matter Now - WeAreDevelopers World Congress 2026 Closing Keynote thumbnail

about 1 month ago

Five Things in Tech that Matter Now - WeAreDevelopers World Congress 2026 Closing Keynote

Christian Heilmann

The Sound of Your Secrets: Teaching Your Model to Spy, So You Can Learn to Defend thumbnail

about 1 month ago

The Sound of Your Secrets: Teaching Your Model to Spy, So You Can Learn to Defend

David vonThenen

Super scaling for the Super Bowl: How to survive 30 million users hitting your backend in 30 minutes thumbnail

about 1 month ago

Super scaling for the Super Bowl: How to survive 30 million users hitting your backend in 30 minutes

Irina Branovic

Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬 thumbnail

about 1 month ago

Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬

Jeremy Murray

Angstfreude - AI and Corporate Culture - The Thrill and the Threat thumbnail

about 1 month ago

Angstfreude - AI and Corporate Culture - The Thrill and the Threat

Axel Ebert, Karin Krobath

Upcoming sessions on this topic

World Congress 2026 North America

Secure-by-Inclusion: Preventing Accessibility Barriers from Becoming Security Vulnerabilities

Radostina (Ina) Tsvetkova

Norwegian Directorate of Labour and Welfare (NAV), Senior Advisor in Digital Accessibility and Inclusive Design

Radostina (Ina) Tsvetkova

World Congress 2026 North America

Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale

Abdel Fane

Founder of OpenA2A

Abdel Fane

World Congress 2026 North America

The Things Your AI Isn't Telling You

Desmond Lamptey

Lead Software Engineer @ Capital One

Desmond Lamptey

World Congress 2026 North America

SecurePrompt: Building a Pre-Flight Security Layer for Agentic AI

Ravi Sastry Kadali

AI/ML Engineer at General Motors

Ravi Sastry Kadali

World Congress 2026 North America

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy

World Congress 2026 North America

Responsible AI Architecture with Zero Trust Agents

Ashok Prakash

Staff ML Engineer at Apple

Ashok Prakash

Related videos

Going Beyond Passwords: The Future of User Authentication thumbnail

WWC 2023 • almost 3 years ago

Going Beyond Passwords: The Future of User Authentication

Gift Egwuenu

No More Post-its: Boost your login security with APIs thumbnail

WWC 2024 • almost 2 years ago

No More Post-its: Boost your login security with APIs

Alvaro Navarro

Passwordless Web 1.5 thumbnail

LIVE • almost 2 years ago

Passwordless Web 1.5

Paweł Łukaszuk

Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls thumbnail

WWC Europe 2026 • about 1 month ago

Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls

Martina Kraus

Passwordless future: WebAuthn and Passkeys in practice thumbnail

WWC 2023 • almost 3 years ago

Passwordless future: WebAuthn and Passkeys in practice

Clemens Hübner

Skynet wants your Passwords! The Role of AI in Automating Social Engineering thumbnail

WWC 2023 • almost 3 years ago

Skynet wants your Passwords! The Role of AI in Automating Social Engineering

Wolfgang Ettlinger, Alexander Hurbean

Related articles

CH

Chris Heilmann

The top 200 passwords of 2024 can be cracked in less than a second

Passwords are a pain and with biometric logins, passkeys and other two factor authentication methods should be a thing of the past. In reality, though, a lot of systems still use username and passw...

over 1 year ago

The top 200 passwords of 2024 can be cracked in less than a second

DC

Daniel Cranney

Understanding and Mitigating Common Web Vulnerabilities

Vulnerabilities exist in many forms on the web, and attackers continue to find creative ways to exploit them. Technological advances like the proliferation of AI are of course exciting nd filled wi...

over 1 year ago

An image with neon lighting featuring a globe and a padlock

CH

Chris Heilmann

Dev Digest 138 - Are you secure about this?

Hello there! This is the 2nd "out of the can" edition of 3 as I am on vacation in Greece eating lovely things on the beach. So, fewer news, but lots of great resources. Many around the topic of sec...

almost 2 years ago

Dev Digest 138 - Are you secure about this?

CH

Chris Heilmann

Dev Digest 134 - Where pixels sing?

News and ArticlesWeAreDevelopers LIVE Data and Security Day is on Wednesday, 25/09/2024. Learn about OPC UA Updates, Best Practices for Using GitHub Secrets, Passwordless Web 1.5, Emerging AI Secur...

almost 2 years ago

Dev Digest 134 - Where pixels sing?

From learning to earning

Jobs that call for the skills explored in this talk.

Principal Software Engineer, Identity

Expert Remote Ruby OAuth OpenID

Staff Developer Advocate, GitHub Security Lab

Experienced $121k–323k Remote Git Github Databases

Engineer, Offensive Security Organization

Delhi, NY, United States

Expert Remote Nmap Twilio Ethereal

Security Architect - AI

Oberkochen, Germany

Expert OAuth Terraform AI Platforms

Penetration Tester / Red team Specialist

Raiffeisen Bank International AG

€47k Linux OAuth Scripting

about 1 month ago

Staff Engineer - Offensive Security

San Francisco, CA, United States

Expert $155k–194k Remote Nmap Twilio Scripting