1 story taggedphishing-resistant-mfa.
Attackers stopped trying to steal push notifications. They just wait for tired users to tap 'approve' at 2 a.m.