FIDO2 stories
Eligible RuPay cardholders in India can now bypass SMS one-time passwords, cutting checkout time as digital-payment fraud climbs sharply.
Security teams may miss the attack because it leaves no persistent phishing site, instead building fake Microsoft login pages inside the browser.
Australian users of OpenAI's security programme will now need hardware-backed passkeys, as older sign-in methods are disabled for higher-risk accounts.
Google says the campaign is shifting towards financial and legal firms, with rebranded extortion sites still stealing cloud logins and tokens.
Phishing-resistant logins could curb account takeovers that let criminals tamper with tax data, refunds and audit trails across firms.
Victims can be tricked more easily as Logokit now tailors fake login pages in real time, sending stolen credentials to Telegram bots.
The update could let companies use a single security key to approve payments, documents and AI actions without custom cryptography.
Access to ChatGPT and GPT-5.6 is being tightened for some accounts as OpenAI moves to hardware-backed passkeys amid rising phishing risk.
Users relying on SMS or voice for sign-ins will be nudged to passkeys as Microsoft phases out weaker multifactor methods in Entra ID.
Users who miss the deadline will lose access to OpenAI's most advanced cyber models, as the firm tightens defences against phishing.
Android users and IT teams can now deploy YubiKeys as hardware-backed passkeys, following Google Play Services support for NFC security keys.
Users can now store passkeys and share vault items securely as ExpressKeys expands beyond basic password management in a major update.
The upgrade gives government and regulated buyers a single device for legacy smart cards and passkeys, as agencies shift to stricter security rules.
A zero-day in a widely used Japanese learning platform let hackers plant malware, while Chinese phishing services are now bypassing one-time codes.
More than 12,000 inboxes were exposed as the kit used to bypass multi-factor authentication and sustain account access was taken offline.
Passwordless logins are gaining traction as HID says employers want one credential for buildings, devices and cloud apps.
Fraudsters are exploiting tax season by stealing credentials and filing bogus returns, putting Australian refunds and ATO accounts at risk.
Stolen credentials are fuelling fraud as attackers bypass ATO controls, exposing taxpayers and forcing tax agents to harden logins.
With phishing and stolen credentials driving most breaches, organisations are being urged to replace passwords with passkeys for safer logins.
Rising cyber threats and hybrid work are pushing Australian employers to replace scattered badges, passwords and tokens with one credential.