Well, greetings friends.

You might have noticed a new sender name in your inbox. Your regular host 'round these parts, Rich from BetterCloud, is out on parental leave (congratulations Rich!), so I'll be filling in for the next few weeks.

On to the news: more phishing-resistant MFA. Let's talk about it.

Here's what happened last week:

• Last week, Microsoft announced it was releasing passwordless, certificate-based authentication (CBA) for Azure AD on iOS and Android devices.
• The goal is to help organizations enable phishing-resistant MFA. The authentication method is based on certificates, not passwords.
• Microsoft is now offering a public preview of Azure AD with CBA support on mobile devices using security keys from Yubico.

Here's why I think this matters to IT.

• It unlocks more support for BYOD.
• It also removes the last major blocker for companies who want to move all of their identities to the cloud, according to Microsoft.
• You tell me: Will this help thwart phishing attacks in hybrid working environments? Have you seen an uptick in phishing attacks? Let me know.