FIDO2 stories
As organisations roll out passkeys beyond pilots, the alliance gains enterprise input on interoperability, recovery and lifecycle management.
Businesses face rising disruption unless seven basic cyber controls are properly integrated, tested and owned across identity, recovery and supplier access.
Security teams may miss the attack because it leaves no persistent phishing site, instead building fake Microsoft login pages inside the browser.
Australian users of OpenAI's security programme will now need hardware-backed passkeys, as older sign-in methods are disabled for higher-risk accounts.
Google says the campaign is shifting towards financial and legal firms, with rebranded extortion sites still stealing cloud logins and tokens.
Phishing-resistant logins could curb account takeovers that let criminals tamper with tax data, refunds and audit trails across firms.
Victims can be tricked more easily as Logokit now tailors fake login pages in real time, sending stolen credentials to Telegram bots.
The update could let companies use a single security key to approve payments, documents and AI actions without custom cryptography.
Access to ChatGPT and GPT-5.6 is being tightened for some accounts as OpenAI moves to hardware-backed passkeys amid rising phishing risk.
Users relying on SMS or voice for sign-ins will be nudged to passkeys as Microsoft phases out weaker multifactor methods in Entra ID.
Users who miss the deadline will lose access to OpenAI's most advanced cyber models, as the firm tightens defences against phishing.
Android users and IT teams can now deploy YubiKeys as hardware-backed passkeys, following Google Play Services support for NFC security keys.
Users can now store passkeys and share vault items securely as ExpressKeys expands beyond basic password management in a major update.
Enterprises moving beyond pilot projects are pushing the FIDO Alliance to focus on interoperability and credential management at scale.
More than 12,000 inboxes were exposed as the kit used to bypass multi-factor authentication and sustain account access was taken offline.
Eligible RuPay cardholders in India can now bypass SMS one-time passwords, cutting checkout time as digital-payment fraud climbs sharply.
Passwordless logins are gaining traction as HID says employers want one credential for buildings, devices and cloud apps.
Fraudsters are exploiting tax season by stealing credentials and filing bogus returns, putting Australian refunds and ATO accounts at risk.
Stolen credentials are fuelling fraud as attackers bypass ATO controls, exposing taxpayers and forcing tax agents to harden logins.
With phishing and stolen credentials driving most breaches, organisations are being urged to replace passwords with passkeys for safer logins.
