Session Abstract: According to Cybersecurity Infrastructure and Security Agency (CISA) there are more than 16 different verticals considered critical infrastructure. While we typically think of industries like air-gapped oil exploration, water purification, and electricity generation, today's critical infrastructure definition has evolved to include financial services, transportation, technology, and more. These environments are often converged and susceptible to every threat associated with the modern security landscape. This includes authentication-based attacks. Bringing together the new and old together (IT and OT) can pose inherent risks, and we've seen recent attacks take advantage of this digital fusing. In this session, we'll discuss the the challenges and (successful) attacks of the modern critical infrastructure environment. We'll review lessons learned and how new and old technologies can be secured with new MFA advancements.