FIDO in the News - FIDO Alliance

Bleeping Computer: Okta – Hackers target IT help desks to gain Super Admin, disable MFA

Lori Glavin — Tue, 12 Sep 2023 15:53:31 +0000

Identity and access management company Okta released a warning about social engineering attacks targeting IT service desk agents at U.S.-based customers in an attempt to trick them into resetting multi-factor authentication (MFA) for high-privileged users. To protect admin accounts from external actors, Okta recommends enforcing phishing-resistant authentication using Okta FastPass and FIDO2 WebAuthn.

The post Bleeping Computer: Okta – Hackers target IT help desks to gain Super Admin, disable MFA appeared first on FIDO Alliance.

Security Magazine: Embracing a company culture of cybersecurity starts at the top

Lori Glavin — Tue, 12 Sep 2023 15:50:35 +0000

Andrew’s byline where he discusses how cybersecurity needs to be a top-down movement, simplifying the process for employees so they do not end up with password fatigue. The culture change should come from leadership, working with the IT team and stakeholders, to ensure better cybersecurity.

The post Security Magazine: Embracing a company culture of cybersecurity starts at the top appeared first on FIDO Alliance.

Forbes: Cyber Autumn: Captivating Cybersecurity Conferences to Dive Into This October 2023

Lori Glavin — Fri, 01 Sep 2023 17:06:50 +0000

Authenticate 2023 is the go-to event for everything related to user authentication. Hosted by the FIDO Alliance, this unique conference is set to take place from October 16-18, 2023, at the Omni La Costa Resort in Carlsbad, CA, just north of San Diego. The conference is designed to give CISOs, business leaders, product managers, and security experts the know-how, tools, and best practices they need to implement state-of-the-art authentication across a range of applications.

The post Forbes: Cyber Autumn: Captivating Cybersecurity Conferences to Dive Into This October 2023 appeared first on FIDO Alliance.

The Verge: X Wants Permission to Start Collecting Your Biometric Data and Employment History

Lori Glavin — Fri, 01 Sep 2023 17:05:21 +0000

X Wants Permission to Start Collecting Your Biometric Data and Employment HistoryAccording to findings from app developer Steve Moser, X plans on rolling out support for passkeys, which can use your device’s fingerprint, facial recognition, or PIN to log in to your account. However, the FIDO Alliance — a nonprofit organization that advocates for the use of passkeys — says biometric data and processing “continues to stay on the device and is never sent to any remote server.”

The post The Verge: X Wants Permission to Start Collecting Your Biometric Data and Employment History appeared first on FIDO Alliance.

SC Media: 3 trends shaping cybersecurity: Passwordless authentication, securing the supply chain and AI

Lori Glavin — Fri, 01 Sep 2023 17:04:12 +0000

Passwordless authentication is one of those concepts that is finally having its day in the sun after Apple, Google and Microsoft came onboard last year, expanding their support for the passwordless sign-in standard created by the FIDO Alliance and the World Wide Web Consortium. “The work that the FIDO Alliance has done to roll out passkeys, really positioning them as a strong way for consumers to start using and leveraging that strong PKI authentication, I think that is a really good step forward,” said Josh Cigna, enterprise solutions architect at Yubico.

The post SC Media: 3 trends shaping cybersecurity: Passwordless authentication, securing the supply chain and AI appeared first on FIDO Alliance.

IEEE Spectrum: Google Develops Quantum-Safe Security Keys

Lori Glavin — Fri, 01 Sep 2023 17:02:51 +0000

Google has developed a quantum-resilient way of implementing the FIDO2 security key standard, an increasingly popular method of authentication that’s used as an alternative to passwords. David Turner, senior director of standards development at FIDO Alliance, which manages password-free authentication standards, said post-quantum changes to security keys are expected to come with challenges.

The post IEEE Spectrum: Google Develops Quantum-Safe Security Keys appeared first on FIDO Alliance.

TechRadar: LinkedIn and X are planning to ditch passwords

Lori Glavin — Fri, 01 Sep 2023 17:01:32 +0000

Two of the biggest social media sites, X (formerly Twitter) and LinkedIn, are reportedly soon set to support passkeys, a way for users to log in to their accounts without using a password. According to discoveries made by iOS developer Steve Mosher, the two services contain code that suggest they will soon be compatible with the new technology, whose standards are governed by the FIDO alliance as set out in the FIDO2 specifications.

The post TechRadar: LinkedIn and X are planning to ditch passwords appeared first on FIDO Alliance.

Infosecurity Magazine: Microsoft warns of adversary-in-the-middle uptick on phishing platform

Lori Glavin — Fri, 01 Sep 2023 17:00:04 +0000

Microsoft has observed a proliferation of adversary-in-the-middle (AiTM) techniques deployed through phishing-as-a-service (PhaaS) platforms, the company explained in a series of tweets posted on August 28, 2023. “This emphasizes the importance of MFA through methods like Microsoft Authenticator, FIDO2 security keys and certificate-based authentication in securing identities,” the company said.

The post Infosecurity Magazine: Microsoft warns of adversary-in-the-middle uptick on phishing platform appeared first on FIDO Alliance.

Cybersecurity Dive: Government investigation puts spotlight on password insecurity

Lori Glavin — Fri, 25 Aug 2023 16:41:23 +0000

When the U.S. Department of the Interior recently conducted an internal investigation into password security, the findings described a situation ripe for exploitation by enterprising cybercriminals. In his Washington Post column, Greenblatt illustrates how his department needs to move away from passwords. We can bolster security with passwordless authentication in the form of passkeys. It’s impossible to access a passkey-protected account without physical access to the end-user device.

The post Cybersecurity Dive: Government investigation puts spotlight on password insecurity appeared first on FIDO Alliance.

Computerworld: Managed Apple IDs, iCloud, and the shadow IT connection

Lori Glavin — Fri, 25 Aug 2023 16:39:30 +0000

One new addition will be the ability to sync iCloud Keychain, Apple’s de facto password and passkey management utility. It integrates with Apple’s biometric services, Touch ID and Face ID. This is a major potential boon for enterprises, particularly those adopting passkeys to replace passwords.

The post Computerworld: Managed Apple IDs, iCloud, and the shadow IT connection appeared first on FIDO Alliance.

Infosecurity Magazine: Why it’s time to kick the password habit

Lori Glavin — Fri, 25 Aug 2023 16:05:59 +0000

Andrew Shikiar discusses why passwords are so hard to give up, and why they should be replaced with passkeys for more security.

The post Infosecurity Magazine: Why it’s time to kick the password habit appeared first on FIDO Alliance.

Biometric Update: Authenticate 2023

Lori Glavin — Fri, 25 Aug 2023 15:59:56 +0000

It’s time to modernize your authentication! Organizations around the globe are embracing a new way to authenticate with FIDO standards, moving past passwords and legacy forms of multifactor authentication to provide users with passkeys for phishing-resistant sign-ins.

The post Biometric Update: Authenticate 2023 appeared first on FIDO Alliance.

HelpNet Security: Anticipating the next wave of IoT cybersecurity challenges

Lori Glavin — Fri, 25 Aug 2023 15:56:11 +0000

Ensuring a seamless integration of IoT with cybersecurity requires a strategic approach by technology leaders. Emphasizing secure bootstrapping, employing advanced, scalable onboarding standards such as FIDO onboarding device, and meticulously building a trusted supply chain are essential. Beyond these, it’s about creating a vigilant ecosystem where every component is not just included but examined for security integrity.

The post HelpNet Security: Anticipating the next wave of IoT cybersecurity challenges appeared first on FIDO Alliance.

FIDO Alliance: FIDO Alliance details agenda for Authenticate 2023, featuring keynote from Rachel Tobac, noted White Hat Hacker and SocialProof Security CEO

Lori Glavin — Fri, 04 Aug 2023 17:33:20 +0000

3-day program for FIDO Alliance’s flagship event on the future of user authentication includes 90+ sessions; Early Bird registration available through August 18

CARLSBAD, Calif., Aug. 3, 2023 /PRNewswire/ — The FIDO Alliance announced its keynote speakers and full agenda for Authenticate 2023, the only industry conference dedicated to all aspects of user authentication.

This year’s featured keynote will be presented by Rachel Tobac, white hat hacker and social engineering expert whose exploits have been featured on CNN, 60 Minutes and more. Additional keynote presentations providing diverse and global perspectives on modern authentication will be delivered by speakers from 1Password, Amazon, Google, Microsoft, Yubico and others.

The post FIDO Alliance: FIDO Alliance details agenda for Authenticate 2023, featuring keynote from Rachel Tobac, noted White Hat Hacker and SocialProof Security CEO appeared first on FIDO Alliance.

CyberSecurity Asean: FIDO APAC Summit Keynotes and Sponsors Announced

Lori Glavin — Fri, 04 Aug 2023 17:31:11 +0000

The FIDO Alliance today provided an updated list of speakers and sponsors for its first-ever FIDO APAC Summit, the premier event dedicated to advancing and promoting phishing-resistant FIDO authentication in the region. Co-hosted by the Ministry of Information and Communications (Vietnam), the summit will take place in Vinpearl Nha Trang, Vietnam, on 28 – 30 August 2023, and centers on the theme of “Connecting for a Safer Digital Future”.

The post CyberSecurity Asean: FIDO APAC Summit Keynotes and Sponsors Announced appeared first on FIDO Alliance.

Biometric Update: Biometric authentication accuracy bar rises, assurance levels evolve in NIST guidance

Lori Glavin — Fri, 04 Aug 2023 17:25:51 +0000

Biometrics performance requirements have been upgraded and identity assurance levels revised in the latest draft update to the U.S. National Institute of Standards and Technology’s Digital Identity Guidelines. NIST reviewed the changes so far, the numerous comments submitted about them, and possible further revisions in a recent webinar.

The changes to biometrics guidelines include a more stringent accuracy requirement for authentication to align with other standards advanced since the previous version was finalized in 2017.

The post Biometric Update: Biometric authentication accuracy bar rises, assurance levels evolve in NIST guidance appeared first on FIDO Alliance.

Computer Weekly: Going passwordless in online shopping

Lori Glavin — Fri, 04 Aug 2023 17:23:01 +0000

In the last few years, the FIDO Alliance, an open industry association, has helped businesses and users authenticate with maximum security and minimum friction. The WebAuthn standard provides the technological foundation by enabling brands to authenticate users with public key cryptography instead of a password.

The post Computer Weekly: Going passwordless in online shopping appeared first on FIDO Alliance.

Heise: We have just reached the turning point

Lori Glavin — Fri, 28 Jul 2023 15:41:29 +0000

Andrew Shikiar is Executive Director of the FIDO Alliance, which developed the Passkeys login process. In an interview with c’t, he answers all the questions that came to us during testing.

The post Heise: We have just reached the turning point appeared first on FIDO Alliance.

Teiss: The rise and rise of passkeys in the tech industry

Lori Glavin — Fri, 28 Jul 2023 15:40:34 +0000

Andrew Shikiar, Executive Director and CMO at FIDO Alliance asks in his byline: why are we still being passive-aggressive about passwords?

The post Teiss: The rise and rise of passkeys in the tech industry appeared first on FIDO Alliance.

Connect-living: Keys instead of passwords: This is how a secure login with an access key works

Lori Glavin — Fri, 28 Jul 2023 13:32:24 +0000

Phishing and other attacks usually have one goal: passwords. So the world could be a better place without passwords. There have already been several attempts to bury the passwords. All have failed – due to the complexity, the costs for hardware keys, for example, or the inconvenient use. The new approach with FIDO2 and Passkeys sounds more promising. By the way, FIDO stands for Fast Identity Online.

The post Connect-living: Keys instead of passwords: This is how a secure login with an access key works appeared first on FIDO Alliance.

News-24: How passkeys will open the door to a more secure and passwordless future

Lori Glavin — Fri, 28 Jul 2023 13:31:22 +0000

More than 24 billion usernames and passwords were available on the dark web last year, a 65% increase since 2020, according to research by Digital Shadows, a digital risk protection company. To this end, the cybersecurity industry is striving to adopt solutions that would eliminate the need for passwords altogether. The latest technology uses what is known as passkeys.

The post News-24: How passkeys will open the door to a more secure and passwordless future appeared first on FIDO Alliance.

B2B Cybersecurity: Effortless authentication with passkeys

Lori Glavin — Wed, 26 Jul 2023 15:30:46 +0000

Passkeys are easier to use than many traditional authentication methods. They are also resistant to phishing, which allows users to consistently and securely log in to supported websites. The passwordless technology, first introduced in 2022, is based on industry standards from the World Wide Web Consortium (W3C) and the FIDO Alliance and is supported by Apple, Google, Microsoft, Paypal, eBay and others.

The post B2B Cybersecurity: Effortless authentication with passkeys appeared first on FIDO Alliance.

Biometricupdate.com: 1Password, Microsoft move to biometric authentication

Lori Glavin — Wed, 26 Jul 2023 15:29:39 +0000

1Password and Microsoft are among vendors moving to passwordless login, switching to phishing-resistant biometric passkeys. In a blog post, 1Password announced a private beta test for passkey account access on iOS and iPadOS.

The post Biometricupdate.com: 1Password, Microsoft move to biometric authentication appeared first on FIDO Alliance.

9TO5Mac: 1Password will soon let users unlock password vaults with passkeys

Lori Glavin — Thu, 20 Jul 2023 17:34:31 +0000

Popular password manager 1Password teased in June that native support for passkeys is coming to the iPhone and iPad app with iOS 17. Now 1Password is taking another big step toward a world without traditional passwords, this time replacing the key to users’ password vaults. Soon, 1Password users will be able to unlock their vaults using just a passkey.

The post 9TO5Mac: 1Password will soon let users unlock password vaults with passkeys appeared first on FIDO Alliance.

IT Brew: Enterprises and developers play leading role in passwordless future

Lori Glavin — Tue, 18 Jul 2023 15:52:13 +0000

Many industry pros are increasingly channeling their inner Bill Gates in 2004 and predicting the decline of the password. The PW prognosticating demonstrates some confidence in the IT world that a passwordless infrastructure is now sufficiently in place. “The most notable shift over the past couple of years has been that every major platform vendor is now supporting open standards for passwordless authentication that are in their flagship operating systems. So, this means for the first time that virtually every modern computing device has the capability to support passwordless authentication,” said Andrew Shikiar, executive director and chief marketing officer at FIDO.

The post IT Brew: Enterprises and developers play leading role in passwordless future appeared first on FIDO Alliance.

Engadget: What the hell are passkeys and why are they suddenly everywhere?

Lori Glavin — Tue, 18 Jul 2023 15:51:08 +0000

Passkeys promise a future without passwords, where we access our accounts as easily as we unlock our phones, with a much higher level of security. “It’s the closest to something that can be scaled to get rid of passwords that we’ve ever seen,” said Megan Shamas, senior director of marketing at industry association FIDO Alliance. A passkey is a digital authentication credential that is securely stored on your device. Instead of what Shamas called a “shared secret” method of passwords, passkeys are a unique key pair for every online service you use bound to the domain.

The post Engadget: What the hell are passkeys and why are they suddenly everywhere? appeared first on FIDO Alliance.

heise: Passwordless login to GitHub: Passkeys in beta

Lori Glavin — Tue, 18 Jul 2023 15:47:26 +0000

GitHub takes another step to replace passwords as a login method and brings passkeys into public beta. Passkeys are the FIDO Alliance’s latest move to simplify secure logins on the Internet – they are intended to solve many of the everyday problems that U2F and FIDO2 hardware tokens bring with them.

The post heise: Passwordless login to GitHub: Passkeys in beta appeared first on FIDO Alliance.

Cashy’s Blog: TikTok now also supports passkeys for login on iOS

Lori Glavin — Tue, 18 Jul 2023 15:46:28 +0000

The short video platform TikTok has announced that it will also be possible to log in with passkeys – on iOS devices. At the same time, it is confirmed that TikTok has now become a member of the FIDO Alliance. Passkeys replace traditional passwords and use encrypted biometric data already stored on your device. They are not processed directly by third-party apps – not even by TikTok.

The post Cashy’s Blog: TikTok now also supports passkeys for login on iOS appeared first on FIDO Alliance.

B2B Cyber Security: Best practices for zero trust

Lori Glavin — Fri, 07 Jul 2023 12:43:12 +0000

Replacing traditional MFA with strong, passwordless authentication methods allows security teams to build the first layer of their Zero Trust architecture. Replacing passwords with FIDO-based passkeys that use asymmetric cryptography, and combining them with secure device-based biometrics, creates a phishing-resistant MFA approach.

The post B2B Cyber Security: Best practices for zero trust appeared first on FIDO Alliance.

ComputerWeekly: The management level in companies must actively live IT security

Lori Glavin — Fri, 07 Jul 2023 12:42:16 +0000

FIDO Alliance’s Andrew Shikiar shares his view on how cyber security is often viewed as a purely technical issue. In this article, he underlines how important security should be firmly integrated into the corporate culture, especially from the management level.

The post ComputerWeekly: The management level in companies must actively live IT security appeared first on FIDO Alliance.

Silicon: Passwordless: an innovative approach to securing access

Lori Glavin — Fri, 07 Jul 2023 12:27:27 +0000

Most of the major players in the sector (Microsoft, Google and Apple in particular) have started to join forces on the subject to think about the technical solutions thanks to which Passwordless could be achieved in future years. FIDO Alliance, WebAuthn and proposed authentication factors, find out what Passwordless is all about.

The post Silicon: Passwordless: an innovative approach to securing access appeared first on FIDO Alliance.

MobileID World: FIDO white papers explain how to use passkeys in the enterprise

Lori Glavin — Thu, 06 Jul 2023 13:58:54 +0000

The FIDO Alliance has published a new set of papers aimed at offering guidance on how passkeys can be used across different enterprise environments.

The post MobileID World: FIDO white papers explain how to use passkeys in the enterprise appeared first on FIDO Alliance.

B2B Cyber Security: Best practices for zero trust

Lori Glavin — Thu, 06 Jul 2023 13:58:03 +0000

The post B2B Cyber Security: Best practices for zero trust appeared first on FIDO Alliance.

Gov Info Security: Feds urge healthcare providers, vendors to use strong MFA

Lori Glavin — Thu, 06 Jul 2023 13:56:18 +0000

HHS OCR is the latest federal agency pushing for more widespread adoption of multifactor authentication. Cybersecurity and Infrastructure Security Agency Director Jen Easterly last October during an address at a FIDO Alliance conference also urged technology vendors to “forcefully nudge” users into MFA.

The post Gov Info Security: Feds urge healthcare providers, vendors to use strong MFA appeared first on FIDO Alliance.

heise online: Passwordless login: Apple ID automatically receives a passkey from iOS 17

Lori Glavin — Wed, 21 Jun 2023 19:37:05 +0000

Apple is pushing the Passkey train, which is intended to replace passwords. The passkey setup for iCloud & Co takes place automatically in Apple operating systems.

The post heise online: Passwordless login: Apple ID automatically receives a passkey from iOS 17 appeared first on FIDO Alliance.

Route Fifty: Passwordless security gains ground

Lori Glavin — Wed, 21 Jun 2023 19:33:52 +0000

In what it called the “beginning of the end of the password,” Google last month began rolling out its own passkeys, an effort that could help agencies go passwordless and embrace a “zero trust” approach with layers of authentication required. Google’s move could create a “positive snowball effect” away from passwords, said Andrew Shikiar, executive director of the FIDO Alliance, which works to develop open authentication standards.

The post Route Fifty: Passwordless security gains ground appeared first on FIDO Alliance.

Journal du Net: Digital accessibility: Why CIOs should make it a priority

Lori Glavin — Thu, 23 Mar 2023 13:10:01 +0000

In this byline, Andrew Shikiar explains how simple and safe digital accessibility is an essential human right today.

The post Journal du Net: Digital accessibility: Why CIOs should make it a priority appeared first on FIDO Alliance.

L’Eclaireur FNAC: How password managers are preparing for a future … without passwords

Lori Glavin — Thu, 23 Mar 2023 13:09:23 +0000

Passwordless authentication has the potential to continue to grow in 2023. In any case, the tech giants, Microsoft, Google and Apple in the lead, within the FIDO Alliance, are doing everything to ensure that the adoption happens as soon as possible. To quickly summarize what we had already explained previously, authentication without passwords, or passwordless , has, as its name suggests, the purpose of allowing you to connect to sites and services without passwords.

The post L’Eclaireur FNAC: How password managers are preparing for a future … without passwords appeared first on FIDO Alliance.

ComputerWeekly: Accessible authentication: What companies need to consider

Lori Glavin — Thu, 23 Mar 2023 13:08:49 +0000

In this byline, Andrew Shikiar, executive director and CMO of the FIDO Alliance explains the importance of accessible, secure authentication for all.

The post ComputerWeekly: Accessible authentication: What companies need to consider appeared first on FIDO Alliance.

Communications of the ACM: Passkeys unlock a new era for authentication

Lori Glavin — Thu, 23 Mar 2023 13:08:13 +0000

Until recently, replacing passwords has ranked somewhere between tricky and impossible. Passkeys completely eliminate passwords, and while they won’t end cyberattacks, they represent a far more convenient and secure framework to navigate the digital world. “Legacy frameworks, including some forms of two-factor authentication, depend on a human-readable and shared secret. This makes them highly susceptible to attack and relatively easy to bypass,” explains Andrew Shikiar, executive director of the FIDO Alliance.

The post Communications of the ACM: Passkeys unlock a new era for authentication appeared first on FIDO Alliance.

SC Media: What should Musk do to better secure Twitter users after 2FA goes away?

Lori Glavin — Thu, 23 Mar 2023 13:07:35 +0000

While Twitter CEO Elon Musk has defended the move to ban 2FA for non-subscribers as a way to protect user security, most leaders aren’t buying it. “Just from a purely pragmatic standpoint, this is basically stripping away the lowest threshold of 2FA out there without any sort of viable or easy replacement,” said Andrew Shikiar, executive director of the FIDO Alliance. As Shikiar sees it, Twitter could have told users that they’re removing OTP but educating users on passkeys, which are safer and built into Android and iOS devices.

The post SC Media: What should Musk do to better secure Twitter users after 2FA goes away? appeared first on FIDO Alliance.

SC Media: GitHub to roll out 2FA for all contributors starting March 13

Lori Glavin — Thu, 23 Mar 2023 13:07:00 +0000

GitHub will begin its official rollout of two-factor authentication for developers who contribute code on the platform, starting March 13. GitHub added that it will support SMS text messages as a second factor, while testing FIDO Alliance passkeys internally to improve the security posture. “It is true that SMS 2FA can be easily phished by hackers as it relies on knowledge-based credentials. But GitHub recognizes these risks and strongly recommends using security keys and TOTPS wherever possible for greater security – [and] will continue to offer SMS for 2FA – which is better than removing the option entirely,” said Andrew Shikiar, executive director of the FIDO Alliance.

The post SC Media: GitHub to roll out 2FA for all contributors starting March 13 appeared first on FIDO Alliance.

SC Media: What should Musk do to better secure Twitter users after 2FA goes away?

Lori Glavin — Fri, 10 Mar 2023 15:57:03 +0000

In just two weeks, the ban on SMS two-factor authentication for non-subscribers on Twitter will go into effect, a move blasted by the majority of the security community.

While Twitter CEO Elon Musk has defended the move as a way to protect user security, most leaders aren’t buying it.

“Just from a purely pragmatic standpoint, this is basically stripping away the lowest threshold of 2FA out there without any sort of viable or easy replacement,” Andrew Shikiar, executive director of the FIDO Alliance, told SC Media.

The post SC Media: What should Musk do to better secure Twitter users after 2FA goes away? appeared first on FIDO Alliance.

Tech Target: GitHub 2FA plan adds SMS, account lockout safeguards

Lori Glavin — Fri, 10 Mar 2023 15:55:13 +0000

GitHub reaffirmed this week that it is testing passkeys from the FIDO Alliance industry association, which is developing “open standards that are more secure than passwords and SMS OTPs, simpler for consumers to use, and easier for service providers to deploy and manage.” Passkeys use public key cryptography standards to authenticate client devices that are protected using biometrics, such as smartphones, eliminating password-based authentication altogether.

The post Tech Target: GitHub 2FA plan adds SMS, account lockout safeguards appeared first on FIDO Alliance.

Ghacks: How to configure two-step login via FIDO2 WebAuthn in Bitwarden

Lori Glavin — Fri, 10 Mar 2023 15:54:13 +0000

Bitwarden password manager users who want to step up the security may configure two-step login via FIDO2 WehAuthn. The feature is not available for all users or in all Bitwarden apps. This article is designed for Bitwarden users who want to understand what FIDO2 WebAuthn is, how it differs from traditional two-factor authentication systems, and how to set it up on Bitwarden.

The post Ghacks: How to configure two-step login via FIDO2 WebAuthn in Bitwarden appeared first on FIDO Alliance.

The Mover: Expect the Unexpected: Top cybersecurity predictions for 2023

Lori Glavin — Fri, 10 Mar 2023 15:33:25 +0000

Due to rapid developments in both safe and harmful technology, cybersecurity is among the most volatile industries. However, we can still identify certain trends affecting the industry. From passwordless solutions broadly available to consumers, to the first real-life cases of automotive hacking, all of these are likely to shape the cybersecurity landscape in 2023. 2022 marks the year when the passwordless future idea experienced its first big wins, and 2023 is expected to be even more fruitful. Many progressive companies are likely to adopt the new passkeys technology, supported by the FIDO (Fast Identity Online) Alliance. Tech giants such as Microsoft, Apple, and Google have already announced their commitment to delivering passwordless logins and even introduced their first efforts to consumers.

The post The Mover: Expect the Unexpected: Top cybersecurity predictions for 2023 appeared first on FIDO Alliance.

ComputerWeekly: How ForgeRock is tackling identity management

Lori Glavin — Fri, 10 Mar 2023 15:32:26 +0000

ForgeRock CEO Fran Rosch has set the identity and access management software supplier on a path to deliver a frictionless identity experience without compromising security or privacy. The article mentions how FIDO standards can tackle the bad experiences users can have with classic authentication systems.

The post ComputerWeekly: How ForgeRock is tackling identity management appeared first on FIDO Alliance.

Sciences et Avenir: The dream of a passwordless Internet

Lori Glavin — Fri, 10 Mar 2023 15:31:41 +0000

The Passkey system used by Apple or Google enables simple and secure online authentication. However, other studies by cyber security experts are less concerned with removing passwords than with strengthening them with additional methods.

The post Sciences et Avenir: The dream of a passwordless Internet appeared first on FIDO Alliance.

IAVC World: Cloud & Security: What IT resellers and CSPs need to do now

Lori Glavin — Fri, 10 Mar 2023 15:23:24 +0000

For many years, Microsoft has offered the possibility to reliably protect accesses from takeovers using multi-factor authentication (MFA) and Fast Identity Online (FIDO). In addition to MFA and FIDO2, Microsoft has recently started offering authentication using certificates in Azure AD. With FIDO Passkey, passwordless authentication can even be realised in Azure AD.

The post IAVC World: Cloud & Security: What IT resellers and CSPs need to do now appeared first on FIDO Alliance.

Dashlane Blog: Dashlane Passkey Support Coming to Android

Lori Glavin — Fri, 03 Mar 2023 17:55:46 +0000

If you use a dedicated password manager, such as Dashlane, you’ll probably expect it to manage your passkeys for you, just as it does with your passwords. Unlike passwords, the mechanism passkeys use is more sophisticated under the hood, though this isn’t apparent in the user experience; passkeys are actually much simpler than passwords to create and use. Dashlane has been at the forefront of passkey support since passkeys were announced last year. In August, Dashlane introduced integrated passkey support in our security-first password manager and unveiled the first in-browser passkey solution.

The post Dashlane Blog: Dashlane Passkey Support Coming to Android appeared first on FIDO Alliance.

Politico Pro: Call for Regs Exposes Divides in White House and On Hill

Lori Glavin — Fri, 03 Mar 2023 17:54:42 +0000

Senator Wyden is urging the Senate sergeant at arms to mandate that lawmakers and Hill staff use an industry-standard security practice to access sensitive Senate networks, per a Friday letter shared first with MC. “Thousands of Senate employees who currently use less-secure forms of MFA must be re-issued new, phishing-resistant FIDO tokens and the Senate must stop supporting methods of MFA that are vulnerable to phishing,” reads the letter.

The post Politico Pro: Call for Regs Exposes Divides in White House and On Hill appeared first on FIDO Alliance.

Tech Radar: Android 14 might get rid of passwords for good

Lori Glavin — Fri, 03 Mar 2023 17:51:38 +0000

As Dashlane puts it, “Passkeys are phishing-resistant credentials based on FIDO standards and are the future of online authentication, designed as a more secure and user-friendly replacement for passwords.” FIDO is the alliance that sets the standards for passwordless technologies, and passkeys need to comply with its WebAuthn specifications. It has the backing of all the big tech players – Apple, Google, Microsoft, Meta, Amazon and so on.

The post Tech Radar: Android 14 might get rid of passwords for good appeared first on FIDO Alliance.

Tech Radar: This year’s newest and most dangerous cyber attack techniques

Lori Glavin — Fri, 03 Mar 2023 17:50:40 +0000

There is continued movement away from using multiple use passwords and towards adopting multifactor authentication (MFA), passkeys, FIDO 2 authentication and other additional layers of security. Companies like Apple and Google are also developing their own authentication token systems.

The post Tech Radar: This year’s newest and most dangerous cyber attack techniques appeared first on FIDO Alliance.

ChannelPartner: Cloud and Security 2023

Lori Glavin — Fri, 03 Mar 2023 17:49:27 +0000

For many years, Microsoft has been offering the option of reliably protecting access from takeovers using multi-factor authentication (MFA) and Fast Identity Online (FIDO). In addition to MFA and FIDO2, Microsoft has recently also offered authentication using certificates in Azure AD, which opens up new possibilities for using cloud services.

The post ChannelPartner: Cloud and Security 2023 appeared first on FIDO Alliance.

L’Eclaireur Fnac: Dashlane is moving forward with passkeys and becoming more transparent

Lori Glavin — Fri, 03 Mar 2023 17:48:37 +0000

Dashlane was one of the first tools to support passkeys for the FIDO Alliance. The famous password manager is making some changes in its strategy and intends to expand its access to passkeys.

The post L’Eclaireur Fnac: Dashlane is moving forward with passkeys and becoming more transparent appeared first on FIDO Alliance.

Global Security Mag: FIDO Alliance announces its “Authenticate 2023” conference

Lori Glavin — Fri, 03 Mar 2023 17:47:24 +0000

The FIDO Alliance is pleased to announce the return of Authenticate, the only industry conference dedicated to all aspects of user authentication – including a focus on FIDO-based sign-ins.

The post Global Security Mag: FIDO Alliance announces its “Authenticate 2023” conference appeared first on FIDO Alliance.

Professional Security Magazine Online: Password posers

Lori Glavin — Fri, 24 Feb 2023 14:36:28 +0000

It is hard to imagine a world without passwords. They remain the most-used authentication method for consumers according to the Fast IDentity Online (FIDO) Alliance’s annual Online Authentication Barometer, despite the fact that passwords almost universally fail at keeping accounts secure and preserving a smooth user experience. The death of the password will be a huge relief for users, removing the need to remember or type passwords and enabling better user experiences. For organisations, the upsides are just as powerful, with a passwordless future offering better improved security, reduced risk of data breaches and lower support costs. As we enter the new year, 2023 seems set to be the year when passwords finally become an endangered species.

The post Professional Security Magazine Online: Password posers appeared first on FIDO Alliance.

Schieb: Passkey instead of password: FIDO Keys

Lori Glavin — Fri, 24 Feb 2023 14:35:38 +0000

Passwords are actually obsolete: they are insecure, impractical and easy to crack/steal. There have long been better methods of securing online accounts. Above all: Passkeys.

The post Schieb: Passkey instead of password: FIDO Keys appeared first on FIDO Alliance.

L’Éclaireur Fnac: How Password Managers Are Preparing for a Future…Without Passwords

Lori Glavin — Fri, 24 Feb 2023 14:34:50 +0000

The post L’Éclaireur Fnac: How Password Managers Are Preparing for a Future…Without Passwords appeared first on FIDO Alliance.

CNBC: Why passkeys from Apple, Google, Microsoft may soon replace your passwords

Lori Glavin — Fri, 17 Feb 2023 23:06:35 +0000

The death of the internet password has been proclaimed many times, but this time, it may actually be coming sooner than you think. Its replacement? The passkey.

Passkeys are the way of the future in basic internet security as they’re intrinsically more secure and phishing resistant, according to Kathleen Moriarty, the chief technology officer at the Center for Internet Security. As major companies including Apple, Google and Microsoft work with the standards developed by the FIDO Alliance and World Wide Web Consortium — two organizations that create password authentication standards — to provide support for passkeys on their platforms, the list of organizations offering passkeys as an alternative to passwords is continuing to grow.

“Passkeys are an example of what security should be: seamless and invisible to the end user,” said Moriarty.

The post CNBC: Why passkeys from Apple, Google, Microsoft may soon replace your passwords appeared first on FIDO Alliance.

Tech Times: Apple, Google, and Microsoft are Pushing Passkeys: Password-less Future?

Lori Glavin — Fri, 17 Feb 2023 23:03:19 +0000

As major tech giants like Apple, Microsoft, and Google take the lead in fully integrating passkey technology into their platforms, passwords may become a thing of the past. Passkeys offer a more secure and convenient way of accessing online accounts and services without the risk of hackers or easy-to-remember passwords.

The post Tech Times: Apple, Google, and Microsoft are Pushing Passkeys: Password-less Future? appeared first on FIDO Alliance.

Android Headlines: 1Password is going passwordless with ‘Passkeys’

Lori Glavin — Fri, 17 Feb 2023 23:01:55 +0000

After the whole LastPass fiasco, many users are wary of entrusting their sensitive information to online password managers. But the era of password-protected vaults may soon be a thing of the past, as leading tech companies, including 1Password, are pushing for a new form of authentication technology that is more secure than passwords called passkeys. The company recently announced plans to support passkeys in the summer of 2023, allowing users to log in to accounts without using a master password.

This move follows the acquisition of ID authentication start-up Passage and the company’s announcement last year that users would soon be able to log in to apps and websites through its platform using passkeys. While 1Password already supports biometric authentication, CPO Steve Won believes that “For passkeys to be the way forward, it’s not enough for them to replace some of your passwords. They have to be able to replace all passwords – including the one you use to unlock 1Password.”

The post Android Headlines: 1Password is going passwordless with ‘Passkeys’ appeared first on FIDO Alliance.

Gizchina: GOODBYE PASSWORDS; HELLO PASSKEYS FROM APPLE, GOOGLE, AND MICROSOFT

Lori Glavin — Fri, 17 Feb 2023 23:00:43 +0000

Internet passwords death may have been proclaimed many times before. But this time, with Apple, Google, and Microsoft going big on passkeys, you might soon have to say goodbye to passwords.

So what exactly are passkeys, and how will they make internet passwords obsolete? Well, there are many great things that this new technology has to bring to the table. And when it goes into the full-fledged integration mode, you feel old using passwords for your accounts. Let’s take a deeper dive to understand more about it.

The post Gizchina: GOODBYE PASSWORDS; HELLO PASSKEYS FROM APPLE, GOOGLE, AND MICROSOFT appeared first on FIDO Alliance.

Biometric Update: Transparency can drive digital ID equity, policy forum panelists say

Lori Glavin — Fri, 03 Feb 2023 20:49:34 +0000

An event last week on ‘Identity, Authentication and the Road Ahead’ held by the Better Identity Coalition, the FIDO Alliance and the Identity Theft Resource Center held a panel discussion among biometrics experts on equity and bias concerns in identity proofing.

The post Biometric Update: Transparency can drive digital ID equity, policy forum panelists say appeared first on FIDO Alliance.

Tech Republic: Unphishable mobile MFA through hardware keys

Lori Glavin — Fri, 03 Feb 2023 20:48:12 +0000

Passwords are a mess, MFA can be more of a stopgap than a solution to phishing and running your own public key infrastructure for certificates is a lot of work. The long-term goal is to move to passwordless credentials that can’t be phished.

The post Tech Republic: Unphishable mobile MFA through hardware keys appeared first on FIDO Alliance.

Intelligent CISO: Passing on passwords in 2023 (finally)

Lori Glavin — Fri, 03 Feb 2023 20:47:19 +0000

Passwords are often an organisation’s weakest link. On World Password Day (May 5), Apple, Google and Microsoft jointly announced that they were building in support for passwordless sign-in, leveraging FIDO2, across all of the desktop, browser and mobile platforms that they control. Crucially, they have all emphasised cross-platform functionality will be a high priority in the development of FIDO2-based passwordless features. With the help of its community of identity, security and biometrics experts, the FIDO Alliance has developed and promoted free, open standards that have taken passwordless authentication to the next level.

The post Intelligent CISO: Passing on passwords in 2023 (finally) appeared first on FIDO Alliance.

CyberWire: NIST on phishing resistance

Lori Glavin — Fri, 03 Feb 2023 20:46:23 +0000

According to NIST Special Publication DRAFT 800-63-B4, a phishing-resistant authenticator offers “the ability of the authentication protocol to detect and prevent disclosure of authentication secrets and valid authenticator outputs to an impostor relying party without reliance on the vigilance of the subscriber.” Two examples of phishing-resistant authenticators are PIV cards for US Federal employees and FIDO authenticators paired with W3C’s Web Authentication API for the private sector.

The post CyberWire: NIST on phishing resistance appeared first on FIDO Alliance.

Solutions Review: Identity Management and Information Security News for the Week of February 3; Radiant Logic, Guardz, Legrand, and More

Lori Glavin — Fri, 03 Feb 2023 20:45:28 +0000

Axiad, a passwordless solutions provider, announced it has been appointed to the FIDO Alliance Board of Directors. Karen Larson, Axiad’s Senior Director, Strategic Partnerships and Alliances will serve as Axiad’s Primary Board Delegate. In her new role as a FIDO Alliance Board Member, Larson will help set direction for the alliance focused specifically on the authentication needs of the enterprise and public sector.

The post Solutions Review: Identity Management and Information Security News for the Week of February 3; Radiant Logic, Guardz, Legrand, and More appeared first on FIDO Alliance.

Business Today: Making the Internet safer and better for all – including our seniors

Lori Glavin — Fri, 03 Feb 2023 20:27:56 +0000

Andrew Shikiar highlights growing cyber threats and e-scams amongst seniors online. As one of the least technologically savvy groups, the elderly is also one of the most vulnerable – and targeted – demographics by online scammers. To achieve a more secure Internet for everyone, we must ensure that the elderly’s needs and preferences are considered. Fortunately, there are readily available standards and best practices to help service providers guide users in adopting passwordless authentication.

The post Business Today: Making the Internet safer and better for all – including our seniors appeared first on FIDO Alliance.

Tech Radar Pro: Apple says these are the best security keys around now

Lori Glavin — Fri, 03 Feb 2023 15:47:29 +0000

Whatever security key you choose, it must be FIDO certified, Apple says. Apple has revealed what it believes are the best security keys to add an extra layer of protection to your digital world. The recent release of iOS 16.3 saw Apple add security key compatibility to its iPhone and iPad devices – as well as to its laptops and desktops with the macOS 13.2 update. Now, in a support document, the company has selected its recommendations for the best physical security keys to use with its devices, which comply with FIDO standards – the foremost alliance on credential security that most of big tech are signed up to.

The post Tech Radar Pro: Apple says these are the best security keys around now appeared first on FIDO Alliance.

B2B Cybersecurity: Do companies need a Chief Zero Trust Officer?

Lori Glavin — Fri, 03 Feb 2023 15:46:47 +0000

The FIDO Alliance provides that you can log in anywhere without a password. Face or fingerprint login is used instead of the old username/password combination. A FIDO login key, sometimes called a “passkey,” makes it easier for users and harder for attackers.

The post B2B Cybersecurity: Do companies need a Chief Zero Trust Officer? appeared first on FIDO Alliance.

CSO: What are passkeys?

Lori Glavin — Fri, 03 Feb 2023 15:45:55 +0000

The FIDO Alliance is the main body behind defining specifications for passkeys. All major cloud service providers and Passkey infrastructure providers are members. In cooperation with the W3C, FIDO introduced the WebAuthn API.

The post CSO: What are passkeys? appeared first on FIDO Alliance.

NIST: Phishing Resistance – Protecting the keys to your kingdom

Lori Glavin — Fri, 03 Feb 2023 15:43:22 +0000

Phishing refers to a variety of attacks that are intended to convince you to forfeit sensitive data to an imposter. These attacks can take a number of different forms; from spear-phishing (which targets a specific individual within an organization), to whaling (which goes one step further and targets senior executives or leaders). Furthermore, phishing attacks take place over multiple channels or even across channels; from the more traditional email-based attacks to those using voice – vishing – to those coming via text message – smishing. Regardless of the type or channel, the intent of the attack is the same – to exploit human nature to gain control of sensitive information (citation 1). These attacks typically make use of several techniques including impersonated websites, attacker-in-the-middle, and relay or replay to achieve their desired outcome.

The post NIST: Phishing Resistance – Protecting the keys to your kingdom appeared first on FIDO Alliance.

GlobeNewswire: NordPass will store passkeys and offer passwordless authentication

Lori Glavin — Fri, 27 Jan 2023 17:02:24 +0000

LONDON, Jan. 26, 2023 (GLOBE NEWSWIRE) — On Thursday, NordPass, the password management company, announced its plans to provide passwordless online authentication solutions to its users in the upcoming months. With an increasing number of websites supporting passkey technology, the company’s customers will soon be able to keep their passkeys in NordPass and access it with biometrics only.

The post GlobeNewswire: NordPass will store passkeys and offer passwordless authentication appeared first on FIDO Alliance.

Security Boulevard: Are you using a FIDO Certified authenticator?

Lori Glavin — Fri, 27 Jan 2023 16:55:29 +0000

Multi-factor authentication (MFA) gets touted as a significant security improvement over traditional “username + password” authentication. However, not all MFA processes are created equal. As the opportunities narrow for cybercriminals to pick off the low-hanging fruit of password-only systems, they’ve turned their focus to weak MFA.

A growing number of organizations have suffered security breaches despite having MFA in place, thanks to expanding digital systems, more advanced phishing tools, and the continued allowance of passwords as an authentication factor. The past year, which saw Microsoft, Uber and Cisco breached by MFA “prompt bombing,” demonstrates that organizations can’t just deploy any type of MFA and presume they’re safe from breaches.

For these reasons, the federal Office of Management and Budget (OMB) and the Cyber and Infrastructure Security Agency (CISA) have emphasized the need for phishing-resistant MFA, specifically passwordless MFA built around FIDO standards. We’ve examined FIDO standards and what they mean for authentication before, but in this post, we look at one of the most critical elements of the process: FIDO Certified authenticators.

The post Security Boulevard: Are you using a FIDO Certified authenticator? appeared first on FIDO Alliance.

Next Impact: Passwordless Authentication: BitWarden Acquires Passwordless.dev

Lori Glavin — Fri, 27 Jan 2023 16:53:46 +0000

Even if the movement will take years, sooner or later the future will be without passwords. Many companies are investing in this transition, including large ones. Last year we saw the proclamation of passkeys, led by the Apple-Google-Microsoft triad, under the aegis of the FIDO Alliance.

The post Next Impact: Passwordless Authentication: BitWarden Acquires Passwordless.dev appeared first on FIDO Alliance.

CSO: How passkeys are changing authentication

Lori Glavin — Fri, 27 Jan 2023 16:52:27 +0000

Well-implemented passkeys can improve the user experience and make it harder for cybercriminals to launch phishing and other attacks.

Passwords are a central aspect of security infrastructure and practice, but they are also a principal weakness involved in 81% of all hacking breaches. Inherent useability problems make passwords difficult for users to manage safely. These security and useability shortcomings have driven the search for alternative approaches known generally as passwordless authentication.

Passkeys are a kind of passwordless authentication that is seeing increasing focus and adoption. They are set to become a key part of security in the coming years. Passkeys represent a more secure foundation for enterprise security. Although they are not foolproof (they can be synced to a device running an insecure OS, for example), they are far more secure than passwords for customers, employees, and partners alike.

The post CSO: How passkeys are changing authentication appeared first on FIDO Alliance.

XDA Developers: Here’s how FIDO security keys will keep your Apple ID secure

Lori Glavin — Fri, 27 Jan 2023 16:51:33 +0000

FIDO security keys are an additional layer of protection for your Apple ID, and here’s how they keep it secure. The most recent update for iOS, iPadOS, and macOS brought a number of improvements and other changes, but one that stands out is the introduction of support for FIDO Certified security keys for Apple IDs. Apple has since detailed how these keys work with your Apple ID, and how you can use them to secure your account.

The post XDA Developers: Here’s how FIDO security keys will keep your Apple ID secure appeared first on FIDO Alliance.

Payments Journal: 2023 Predictions: Authentication, Digital Identity, and In-Car Payments

Lori Glavin — Fri, 27 Jan 2023 16:49:48 +0000

As the number of devices and connected services rise, our lives are becoming increasingly digitized. Keeping up with this evolving landscape is vital, and 2023 promises to bring with it a host of new use cases and innovations. New technologies are coming to market that provide a greatly enhanced user experience that doesn’t compromise on security. Innovative solutions such as SoftPOS are challenging traditional payment methods, while account-to-account (A2A) payments have the potential to shake up the entire payments ecosystem.

We explore some of the key trends in the ecosystem that will have a major impact on the way we live in 2023. From the changing nature of authentication to paying with your car, the ever-digitizing world will continue to transform our lives.

The post Payments Journal: 2023 Predictions: Authentication, Digital Identity, and In-Car Payments appeared first on FIDO Alliance.

Silicon: Authentication: “Apple ID + FIDO key” option enabled

Lori Glavin — Fri, 27 Jan 2023 15:51:10 +0000

Using a FIDO key as a second authentication factor on an Apple account is now possible, under certain conditions.

The post Silicon: Authentication: “Apple ID + FIDO key” option enabled appeared first on FIDO Alliance.

CISO Series: Cyber Security Headlines: Bypassing patches, ChatGPT polymorphic malware, Bitwarden goes passwordless

Lori Glavin — Fri, 20 Jan 2023 19:31:30 +0000

Bitwarden acquires Passwordless.dev – This marks the first acquisition for the open-source password management platform, obtaining the Swedish startup PAsswordless.dev. The company specializes in tools for developers to integrate passwordless authentication. Bitwarden supports some passwordless authentication already, including biometrics and the use of FIDO security keys.

The post CISO Series: Cyber Security Headlines: Bypassing patches, ChatGPT polymorphic malware, Bitwarden goes passwordless appeared first on FIDO Alliance.

Forbes: Thousands Of PayPal Accounts Hacked—Is Yours One Of Them?

Lori Glavin — Fri, 20 Jan 2023 19:30:23 +0000

According to a PayPal notice of security incident dated January 18, attackers got unauthorized access to the accounts of thousands of users between December 6 and 8, 2022. The total number of accounts that were accessed by threat actors using a credential stuffing attack is reported as being 34,942. While accepting that PayPal is seemingly doing the best it can for the customers involved in this security incident by recommending password changes, Jasson Casey, chief technology officer at Beyond Identity insists that “passwords – whether unique or complex – are fundamentally flawed.” Instead, Casey says, organizations should be moving to phishing-resistant credentials such as the FIDO Alliance standard blueprints.

The post Forbes: Thousands Of PayPal Accounts Hacked—Is Yours One Of Them? appeared first on FIDO Alliance.

B2B Cyber Security: Cybersecurity Trends for 2023

Lori Glavin — Fri, 20 Jan 2023 19:27:46 +0000

Perhaps the FIDO Alliance’s passkey solution is the first truly effective method to mitigate social engineering attacks. This is because the passkey for authentication on the respective website is based on the device unlocking method used by the user.

The post B2B Cyber Security: Cybersecurity Trends for 2023 appeared first on FIDO Alliance.

Sky News: ‘Passkeys’ mean you ‘never need to know a password’

Lori Glavin — Fri, 20 Jan 2023 19:26:55 +0000

Image Matrix Tech Editor Djuro Sen says “passkeys”, developed by FIDO, means you “never need to know a password”. “It essentially removes the fact of using a password and you just use your device, your phone or something else, mostly your phone, to log in to say, through this example, eBay,” Mr Sen told Sky News Australia. “This uses a type of cryptography that has a public key and a private key.”

The post Sky News: ‘Passkeys’ mean you ‘never need to know a password’ appeared first on FIDO Alliance.

Financial IT: 2023 Predictions: Authentication, Digital Identity and In-Car Payments

Lori Glavin — Fri, 20 Jan 2023 19:26:12 +0000

On major trend from 2022 is the continued evolution of the fraud industry. A combination of active and passive authentication can ensure that the payments flow is secure while limiting the impact on the customer experience. Major global payment schemes are introducing new regulations that will see banks recognize the authentication work done on the merchant side. This means that merchants are able to leverage industry authentication standards like FIDO Alliance to create their own checkout journey to reduce the friction between the customer and merchant services. This helps combat both fraud and cart abandonment, helping to deliver higher sales conversion rates and a better return on investment.

The post Financial IT: 2023 Predictions: Authentication, Digital Identity and In-Car Payments appeared first on FIDO Alliance.

Ça m’intéresse: 2023, year of the end of passwords?

Lori Glavin — Tue, 17 Jan 2023 15:07:36 +0000

Often criticized and victim of security flaws, the password system could soon be replaced by a more reliable technology: passkey.

The post Ça m’intéresse: 2023, year of the end of passwords? appeared first on FIDO Alliance.

IT-Business: Netwrix Password Secure: How to ensure secure password management in companies

Lori Glavin — Fri, 13 Jan 2023 18:58:00 +0000

The Yubico Security Key is based on the authentication method of the FIDO Alliance and the World Wide Web Consortium (W3C) for mobile devices and browsers. Using the FIDO2 algorithm (Fast Identity Online) it is possible to identify yourself to online services with verified hardware.

The post IT-Business: Netwrix Password Secure: How to ensure secure password management in companies appeared first on FIDO Alliance.

Information Age: Cybersecurity predictions for 2023

Lori Glavin — Fri, 13 Jan 2023 15:40:38 +0000

Andrew Shikiar, executive director of FIDO Alliance, thinks that we’ll see a lot more high-profile, sophisticated attacks which bypass legacy multi-factor authentication (MFA) in 2023. <…> Andrew Shikiar, executive director of FIDO Alliance, predicts the metaverse will become a growing target for hackers, with MFA becoming a stronger imperative as attacks increase in volume and sophistication. <…> Being sent OTP text messages as part of multi-factor authentication will be seen as not fit for purpose once organisations understand how hackable they are, says Andrew Shikiar, executive director of FIDO Alliance.

The post Information Age: Cybersecurity predictions for 2023 appeared first on FIDO Alliance.

TEISS: Cyber-security in 2023

Lori Glavin — Fri, 13 Jan 2023 15:39:49 +0000

Andrew Shikiar at FIDO Alliance gives his predictions for what can we expect from the cyber-security industry in 2023.

The post TEISS: Cyber-security in 2023 appeared first on FIDO Alliance.

InfoSecurity: Point/Counterpoint: Are We Moving to a Passwordless Future?

Lori Glavin — Fri, 13 Jan 2023 15:39:11 +0000

Yes: Andrew Shikiar. You might think you’ve heard it all before, right? A passwordless age is the cyber utopia we all yearn for but promises of totally wiping out passwords feels far-fetched and far off. After all, how do you go about unpicking a thread so tightly woven into your daily life? Eradicating passwords will take time, but recent industry news and progress is showing we can confidently say the future is passwordless – and getting nearer.

The post InfoSecurity: Point/Counterpoint: Are We Moving to a Passwordless Future? appeared first on FIDO Alliance.

The Green Sheet: Fierce authentication for an omnichannel threatscape

Lori Glavin — Fri, 13 Jan 2023 15:38:04 +0000

The ability to transact across all channels has opened opportunities and threats, expanding retail and hospitality playing fields and creating a broader attack surface for fraudsters. Now more than ever it is important to understand how to properly protect your company. While at Authenticate, Andrew Shikiar explains the FIDO journey and its 2022 achievements including passkey, stating that he believes, “we have an opportunity with authentication to be a bridge of the digital divide and not another wedge.”

The post The Green Sheet: Fierce authentication for an omnichannel threatscape appeared first on FIDO Alliance.

Transaction Trends (US): ETA Expert Insights: FIDO Designs Faster Deployments

Lori Glavin — Fri, 13 Jan 2023 15:27:05 +0000

FIDO was founded in 2012 by PayPal, Lenovo, and Nok Labs. They are working to change authentication through open standards that are more secure than passwords, more straightforward for consumers, and more accessible for service providers to deploy and manage. FIDO’s latest innovation, passkey, provides fast, easy, secure sign-ins to websites and apps across multiple devices. Passkey users can sign in with a biometric, PIN or security key rather than a username and password, FIDO representatives noted, and without having to re-enroll devices or accounts each time, they sign in.

The post Transaction Trends (US): ETA Expert Insights: FIDO Designs Faster Deployments appeared first on FIDO Alliance.

SDxCentral (US): FIDO Pushes Password Replacement as MFA Bypass Attacks to Surge in 2023

Lori Glavin — Fri, 13 Jan 2023 15:26:18 +0000

The FIDO Alliance expects to see more high-profile cyberattacks targeting cloud service providers that bypass traditional multi-factor authentication (MFA), which will push more major brands to adopt the passkey password replacement in 2023.

The post SDxCentral (US): FIDO Pushes Password Replacement as MFA Bypass Attacks to Surge in 2023 appeared first on FIDO Alliance.

WIRED: The Password Isn’t Dead Yet. You Need a Hardware Key

Lori Glavin — Fri, 13 Jan 2023 15:22:44 +0000

After years of work, the tech industry finally took major steps in 2022 toward a long-promised passwordless future. The move is riding on the back of a technology called “passkeys” that are built on FIDO standards. Operating systems from Apple, Google, and Microsoft now support the technology, and many other platforms, browsers, and services have adopted it or are in the process of doing so. As much as you might wish it, though, passwords aren’t going to disappear anytime soon, thanks to their sheer ubiquity. And amid all the buzz about passkeys, hardware tokens are still an important protection option.

The post WIRED: The Password Isn’t Dead Yet. You Need a Hardware Key appeared first on FIDO Alliance.

ITPro.: The IT Pro Podcast: Going passwordlessITPro.:

Lori Glavin — Mon, 09 Jan 2023 15:50:15 +0000

Passwords: they can be tricky at the best of times. Proper password hygiene is one of the most important factors in endpoint security, as it keeps sensitive data secure and prevents threat actors from getting into important systems.

But despite the risks, the use of weak or recycled passwords continues to be a problem even amongst IT professionals. While systems such as two factor authentication have been used as an extra layer of security, groups like the FIDO Alliance and World Wide Web Consortium have been working to make passwords a thing of the past, in favour of more secure methods.

This week, we spoke to Richard Meeus, EMEA director of security & technology strategy for Akamai Technologies, to explore the solutions driving secure sign ons, and how the sector can adapt to this change.

The post ITPro.: The IT Pro Podcast: Going passwordlessITPro.: appeared first on FIDO Alliance.

Biometric Update: PayEye dual biometrics win FIDO certification with zero PAD errors

Lori Glavin — Mon, 09 Jan 2023 15:49:04 +0000

Polish fintech provider PayEye has obtained its FIDO Biometric Component Certification and proven highly resistant to presentation attacks, according to a news release.

PayEye submitted the latest version of its eyePOS payment system, equipped with the company’s proprietary iris recognition algorithm, to trials run by private U.S. lab iBeta. EyePOS uses a fusion of face and iris biometrics to authenticate the identity of the person making a payment.

The FIDO Alliance certification requires evaluation of both biometric matching performance and spoof attack detection.

The post Biometric Update: PayEye dual biometrics win FIDO certification with zero PAD errors appeared first on FIDO Alliance.

Payments Journal: On-Demand Webinar: Go Beyond Fraud Prevention with Identity

Lori Glavin — Mon, 09 Jan 2023 15:48:10 +0000

When companies use identity data effectively, they deliver a highly personalized, frictionless journey that offers the right products to the right customers at the right time. They’re also able to optimize fraud prevention while minimizing any irritation for customers.

During a webinar, Adam Gunther, Senior Vice President and Senior Technology Officer at Kount, and Tim Sloane, Vice President of Payments Innovation at Mercator Advisory Group, discussed how identity data can be used to smooth the payments process and drive business. They also discussed new trends, including biometric data and tokenization.

The post Payments Journal: On-Demand Webinar: Go Beyond Fraud Prevention with Identity appeared first on FIDO Alliance.

Biometric Update: FIDO offers guidance for government service use as countries deploy blockchain, biometrics

Lori Glavin — Mon, 09 Jan 2023 15:47:24 +0000

Governments around the world continue to develop digital identity capabilities to give residents easier access to public services, and the FIDO Alliance has published a white paper to help them do so in phishing-resistant ways. The paper comes as a pair of alternative approaches to digital identity for government services are implemented, in Turkey and Bangladesh.

The white paper is intended to guide policymakers and the heads of government agencies and departments as they consider FIDO authentication for government services.

The post Biometric Update: FIDO offers guidance for government service use as countries deploy blockchain, biometrics appeared first on FIDO Alliance.

CSO: Why it might be time to consider using FIDO-based authentication devices

Lori Glavin — Mon, 09 Jan 2023 15:45:03 +0000

Every business needs a secure way to collect, manage, and authenticate passwords. Unfortunately, no method is foolproof. Storing passwords in the browser and sending one-time access codes by SMS or authenticator apps can be bypassed by phishing. Password management products are more secure, but they have vulnerabilities as shown by the recent LastPass breach that exposed an encrypted backup of a database of saved passwords. For organizations with high security requirements, that leaves hardware-based login options such as FIDO devices.

The post CSO: Why it might be time to consider using FIDO-based authentication devices appeared first on FIDO Alliance.