Patrick Harr, CEO at SlashNext, said MFA is still an effective mitigation against phishing because it increases the difficulty of leveraging compromised credentials to breach an organization.