February 3, 2023

NIST: Phishing Resistance – Protecting the keys to your kingdom

Phishing refers to a variety of attacks that are intended to convince you to forfeit sensitive data to an imposter. These attacks can take a number of different forms; from spear-phishing (which targets a specific individual within an organization), to whaling (which goes one step further and targets senior executives or leaders). Furthermore, phishing attacks take place over multiple channels or even across channels; from the more traditional email-based attacks to those using voice – vishing – to those coming via text message – smishing. Regardless of the type or channel, the intent of the attack is the same – to exploit human nature to gain control of sensitive information (citation 1). These attacks typically make use of several techniques including impersonated websites, attacker-in-the-middle, and relay or replay to achieve their desired outcome.

MORE FIDO in the News


Bleeping Computer: Okta – Hackers target IT help desks to gain Super Admin, disable MFA

Identity and access management company Okta released a warning about...

September 12, 2023

Security Magazine: Embracing a company culture of cybersecurity starts at the top

Andrew’s byline where he discusses how cybersecurity needs to be...


Forbes: Cyber Autumn: Captivating Cybersecurity Conferences to Dive Into This October 2023

Authenticate 2023 is the go-to event for everything related to...

September 1, 2023

The Verge: X Wants Permission to Start Collecting Your Biometric Data and Employment History

X Wants Permission to Start Collecting Your Biometric Data and...