---
title: "Strong passwords and MFA/TFA mechanisms should be enabled, especially for administrator and root… — Turan Security Xavfsizlik Byulleteni — DecisionGateway"
description: "commitment by Turan Security Xavfsizlik Byulleteni, recorded recently — verbatim quote and source citation."
canonical_url: "https://dgw.tmarket.io/claims/01a1d0db-ca2a-7012-a2bc-edd3b8256e16"
meta:
  "og:description": "commitment by Turan Security Xavfsizlik Byulleteni, recorded recently — verbatim quote and source citation."
  "og:image": "https://dgw.tmarket.io/og.jpg"
  "og:image:alt": "White network of connected nodes crossed by a timeline on black"
  "og:image:height": "1024"
  "og:image:width": "1024"
  "og:title": "Strong passwords and MFA/TFA mechanisms should be enabled, especially for administrator and root… — Turan Security Xavfsizlik Byulleteni — DecisionGateway"
  "twitter:image": "https://dgw.tmarket.io/og.jpg"
---

> Index of every page on this site: [llms.txt](https://dgw.tmarket.io/llms.txt)

commitment

# **Strong passwords and MFA/TFA mechanisms should be enabled, especially for administrator and root accounts.**

A commitment by Turan Security Xavfsizlik Byulleteni. Statements are as reported by the cited publishers — not verified by DecisionGateway.

> *Administrator, ayniqsa root hisoblari uchun kuchli parol va MFA/TFA mexanizmlarini yoqing.*

turansecurityPublished 2026-09-01 [ Read source](https://t.me/turansecurity/663)

## **Related claims**

[**Clicking the link in the email is not required; no authentication is required, no user interaction is needed, and MFA does not help.**turansecurity · allegation](https://dgw.tmarket.io/claims/01a1d0db-47a4-7e21-8d4f-0f8642a6061a) [**For security teams, the message of this report is clear: merely protecting passwords and endpoints is not enough; control of authentication processes, active sessions, and changes to defensive tool settings must also be taken seriously.**intsec · statement](https://dgw.tmarket.io/claims/01a1d29f-8ee2-73e5-a82d-7b631fa29a15) [**In three of these campaigns, the common point was abuse of Microsoft's Device Code Authentication, a method by which an attacker, by deceiving the user, can gain access to their Microsoft 365 account without stealing a password and even while directly bypassing MFA.**intsec · allegation](https://dgw.tmarket.io/claims/01a1d29f-8ecc-7ce9-b66d-adfe6f873101) [**此前需致电建亚从后台停用后才能在新设备重新启用流动保安密码。**encmasuta · statement](https://dgw.tmarket.io/claims/01a1d5f2-92d0-746c-bd24-42788004f9e6) [**Website owners must check for signs of breaches.**THnewsupdates · commitment](https://dgw.tmarket.io/claims/01a1c5f7-f98e-7b4f-a17f-1156af32eb75) [**A critical vulnerability in Keycloak's reset-credentials (CVE-2026-18963, CVSS 9.1) allows any authenticated user, including administrators, to complete a password reset and set a new password.**turansecurity · allegation](https://dgw.tmarket.io/claims/01a1d0db-476c-72a9-b2ea-e46190929636)

[All claims](https://dgw.tmarket.io/claims)

```json
{"@context":"https://schema.org","@graph":[{"@id":"https://dgw.tmarket.io/#website","@type":"WebSite","description":"Decisions, events and falsifiable forecasts from 3,800+ Telegram channels — every claim cited. Read free.","name":"DecisionGateway","url":"https://dgw.tmarket.io/","publisher":{"@id":"https://dgw.tmarket.io/#identity"}},{"@id":"https://dgw.tmarket.io/claims/01a1d0db-ca2a-7012-a2bc-edd3b8256e16#webpage","@type":"WebPage","description":"commitment by Turan Security Xavfsizlik Byulleteni, recorded recently — verbatim quote and source citation.","name":"Strong passwords and MFA/TFA mechanisms should be enabled, especially for administrator and root… — Turan Security Xavfsizlik Byulleteni — DecisionGateway","url":"https://dgw.tmarket.io/claims/01a1d0db-ca2a-7012-a2bc-edd3b8256e16","breadcrumb":{"@id":"https://dgw.tmarket.io/claims/01a1d0db-ca2a-7012-a2bc-edd3b8256e16#breadcrumb"},"isPartOf":{"@id":"https://dgw.tmarket.io/#website"},"potentialAction":[{"@type":"ReadAction","target":["https://dgw.tmarket.io/claims/01a1d0db-ca2a-7012-a2bc-edd3b8256e16"]}]},{"@id":"https://dgw.tmarket.io/#identity","@type":"Organization","name":"DecisionGateway","url":"https://dgw.tmarket.io"},{"@id":"https://dgw.tmarket.io/claims/01a1d0db-ca2a-7012-a2bc-edd3b8256e16#breadcrumb","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","name":"Home","item":"https://dgw.tmarket.io","position":1},{"@type":"ListItem","name":"Claims","item":"https://dgw.tmarket.io/claims","position":2},{"@type":"ListItem","name":"Strong passwords and MFA/TFA mechanisms should be enabled,…","position":3}]},{"@id":"https://dgw.tmarket.io/claims/01a1d0db-ca2a-7012-a2bc-edd3b8256e16#/schema/quotation/1","@type":"Quotation","dateCreated":"2026-09-01","isBasedOn":"https://t.me/turansecurity/663","text":"Administrator, ayniqsa root hisoblari uchun kuchli parol va MFA/TFA mexanizmlarini yoqing.","url":"/claims/01a1d0db-ca2a-7012-a2bc-edd3b8256e16"}]}
```

## Sitemap

See the full [sitemap](https://dgw.tmarket.io/sitemap.md) for all pages.