UK: NCSC publishes cyber guidance for retailers

The guidance emphasizes the need to add extra layers of security on top of passwords – such as multi-factor authentication (MFA), OAuth 2.0 or single sign-on, FIDO2, or one-time passcodes.