Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Token Research Exposes 39 Passkey Attack Methods: A Defender's Guide to Hardening FIDO2 Deployments
Introduction Passkeys were supposed to end the phishing era. For credential replay and password theft, they largely have — FIDO2's origin-bo...
WhatsApp Multiple Passkeys and Stronger Two-Step Verification: A Defender's Configuration and Hardening Guide
WhatsApp Raises the Bar on Account Security — What Defenders Need to Do Now WhatsApp has begun rolling out a set of account security enhance...
Passkey Attacks Can Expose Synced FIDO2 Keys and Bypass Phishing-Resistant MFA: Detection and Hardening Guide
Overview Security researchers are describing a new class of attacks against passkeys that undermine two assumptions many organizations made ...
Pass-ta-key Attacks: Detecting Google Passkey Hijacking on Windows
Introduction Security researchers have unveiled "Pass-ta-key," a set of three novel attack vectors that allow malicious software to hijack G...
Microsoft Entra Passkeys on Windows: Deployment Guide for Phishing-Resistant Auth
Introduction Microsoft is initiating a significant shift in identity security with the late-April rollout of Entra passkey support for Windo...