Multi-factor authentication fatigue can blow open security

In MFA fatigue, the attacker uses the stolen credentials to try to sign into a protected account over and over, overwhelming the user with push notifications. It relies on social engineering, as well as any shortcomings in the system design.