Skip to content
October 24, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • News
  • Technology
  • Google Chrome and Mozilla Firefox will support the new password-free standard, WebAuthn
  • Technology

Google Chrome and Mozilla Firefox will support the new password-free standard, WebAuthn

Do Son April 10, 2018 2 minutes read
Add Daily CyberSecurity as a preferred source on Google

Today, the W3C and FIDO Alliance standards bodies announced that Web browsers are building a new type of login. The new open standard, called WebAuthn, will be supported in the latest version of Firefox and will be supported in the Chrome and Edge versions released in the coming months. This is the latest move over the years to keep users away from passwords and to switch to more secure login methods such as biometrics and USB tokens.

The system is already in place on major services like Google and Facebook, where you can log in using Yubikey devices that are FIDO compliant.

“WebAuthn defines a standard web API that can be incorporated into browsers and related web platform infrastructure which gives users new methods to securely authenticate on the web, in the browser and across sites and devices. WebAuthn has been developed in coordination with FIDO Alliance and is a core component of the FIDO2 Project along with FIDO’s Client to Authenticator Protocol (CTAP) specification. CTAP enables an external authenticator, such as a security key or a mobile phone, to communicate strong authentication credentials locally over USB, Bluetooth or NFC to the user’s internet access device (PC or mobile phone). The FIDO2 specifications collectively enable users to authenticate easily to online services with desktop or mobile devices with phishing-resistant security.”

WebAuthn will undoubtedly accelerate the implementation of secure login, whether it is to use these technologies as alternate login methods or completely replace passwords. As the more open source code is written to the new standard, developers will be more likely to implement new login methods.

 

Related coverage

  • Intel’s Arc GPUs Are Safe, But a “Murky Future” Looms
  • Meta Moves to Curb Employee AI Usage Costs
  • Google Extends FREE AI Pro Subscription for Students Until 2027
  • Monero Under Fire: Qubic Mining Pool Executes Successful 51% Attack, Rocking Crypto World
  • OneDrive’s AI Facial Recognition Can Only Be Disabled Three Times Per Year for Preview Users
  • AT & T, Verizon, T-Mobile and Sprint will launch “Next-Generation Mobile Authentication Platform”
Track all actively exploited CVEs →

Support Our Threat Intelligence

Find our tech and OS security coverage helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.

We respect your inbox. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: WebAuthn

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 24, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 24, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 24, 2026
  • CVE-2014-125133CVSS 8.7
    NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary...
    Watchtower Verified📅 Updated: Oct 24, 2026
  • CVE-2015-20128CVSS 8.8
    FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries...
    Watchtower Verified📅 Updated: Oct 24, 2026
  • CVE-2016-20104CVSS 8.7
    EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allows unauthenticated attackers to...
    Watchtower Verified📅 Updated: Oct 24, 2026
  • CVE-2026-110447CVSS 9.2
    Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in...
    CISA KEV📅 Added to KEV: Oct 23, 2026
  • CVE-2026-114625CVSS 9.9
    VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access...
    CISA KEV📅 Added to KEV: Oct 23, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-115806CVSS 9.8
    The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all...
    📅 Updated: Oct 24, 2026
  • CVE-2026-79855CVSS 9.8
    An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to circumvent existing...
    📅 Updated: Oct 24, 2026
  • CVE-2026-79856CVSS 9.8
    A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote attacker...
    📅 Updated: Oct 24, 2026
  • CVE-2026-79857CVSS 9.8
    There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8 that...
    📅 Updated: Oct 24, 2026
  • CVE-2026-79858CVSS 9.8
    An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated...
    📅 Updated: Oct 24, 2026
  • CVE-2026-79852CVSS 9.8
    A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct SQL...
    📅 Updated: Oct 24, 2026
  • CVE-2026-79854CVSS 9.8
    A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL injection...
    📅 Updated: Oct 24, 2026
  • CVE-2026-105014CVSS 9.1
    Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker...
    📅 Updated: Oct 24, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.