Summary：Multi-factor authentication (MFA) has quite rightly become the de facto standard for strengthening access controls. Yet even the best MFA implementations leave a critical gap: weak, reused or compromised passwords. When an attacker bypasses or circumvents MFA (whether by tricking a user into approving a push notification or exploiting a fallback) those same poor passwords become the attacker’s key to your systems.

Summary：Taiwan's largest telecommunications operator, ChungHwa Telecom, faces the risk of Account Takeover (ATO), with at least tens of thousands of users having been impacted.