MFA authenticates at the front door and never looks again. That's the gap attackers are exploiting — and most enterprises haven't closed it.

GitHub confirmed attackers stole 3,800 internal repositories via a poisoned VS Code extension. Seven developer-identity surfaces failed in one month; no vendor covers all seven.