Step-Up MFA Is the Wrong Response to Credential-Theft Tools in a Privileged Session

Most session-control products respond to a risky command the same way: pause, ask for another MFA...