FIDO2
Yikes, YubiKey Vulnerable — ‘EUCLEAK’ FIDO FAIL?
USB MFA SCA😱: Infineon hardware and software blamed for timing side-channel attack on popular auth tokens ...
Google Pushes ‘Passkeys’ Plan — but it’s Too Soon for Mass Rollout
FIDO FAIL: “Killing passwords” is a worthy goal—but is coercion the best way? ...
Gmail Adds Extra Checks, Thwarting Sneaky Hackers
Sensitive actions such as forwarding to be protected by extra 2FA step ...
Importance of CJIS Compliance
If your organization has access to sensitive data from government agencies, you will most likely have to adhere to the Criminal Justice Information Services (CJIS) compliance requirements. In this context, sensitive data, ...
Reddit Hacked — 2FA is no Phishing Phix
Reddit got hacked with a “sophisticated” spear phishing attack. The individual victim was an employee who clicked the wrong email link ...
0ktapus/‘Scatter Swine’ Hacking Gang Stole 10,000 Corp Logins via Twilio
More on the Twilio débâcle from earlier this month: Researchers reveal the hackers swiped at least 9,931 user credentials from more than 130 organizations ...
Bad Dog—Everyone HATES This FIDO Passwordless Idea
Behold! The next steps to passwordless nirvana. But will FIDO2-WebAuthn let “privacy invading megacorps” profit from your private data? ...
Why FIDO2 Is the Answer to Better Security
A groundbreaking increase in security incidents is affecting governments around the world. In light of this, the United States issued a formal order to implement a robust set of security measures designed ...
Is MFA a Security Illusion?
A recent Akamai Security blog post, Massive Campaign Targeting UK Banks Bypassing 2FA, written by my colleague Or Katz, is a great insight into how attackers used very simple techniques to bypass ...
4 Tips for End-to-end Passwordless Authentication for Hybrid Deployments
Most applications are still protected only by passwords that are prone to man-in-the-middle and phishing attacks, increased operational costs, and user frustration. Today, organizations are looking to implement security practices that eliminate ...
