CERT/CC warns of a critical Xerj authentication bypass tracked as CVE-2026-97406 that lets attackers mint persistent tokens without passkeys.
Passkeys
Discover the new Android password manager migration feature. Learn how to securely transfer passkeys, passwords, and data between apps using FIDO standards.
Google selfie video sign-in lets you record guided head movements to regain account access, with liveness checks that block deepfakes and photos.
OpenAI launches Advanced Account Security for high-risk users. Features include mandatory passkeys, disabled SMS recovery, and automatic training exclusion.
Google donates the AP2 protocol to the FIDO Alliance, launching v0.2 with "Human Not Present" payments. Secure your AI agents with the new Verifiable Intent standard.
Celebrate Data Privacy Day 2026 with Apple’s 10 best security tools. From Private Cloud Compute to Locked Apps, take control of your digital footprint.
Google is retiring its Dark Web Report service in February 2026, stating it only caused anxiety by failing to offer users actionable steps to remedy leaked personal data.
Windows 11 now supports a new API allowing password managers (like 1Password, Bitwarden) to handle passkey authentication directly, simplifying cross-platform sign-in.
Edge v142.0 introduces cross-platform passkey sync, letting users reuse passkeys securely across devices with a PIN, enhancing passwordless authentication.
New research from Proofpoint shows that attackers can bypass FIDO passkeys using a downgrade attack, forcing a fallback to less secure authentication methods.
Windows 11 25H2 Dev Build introduces deeper password manager integration, starting with 1Password, allowing Windows Security to use and save passkeys in 1Password vaults.
Meta introduces Passkey support for Facebook and Messenger on iOS/Android, enabling secure, passwordless logins via biometrics or PINs, enhancing user convenience and security.
iOS 26's Passwords app now lets users view the complete history of saved credentials, making it easier to recover overwritten or forgotten passwords.
Microsoft is phasing out password saving and autofill in Authenticator. Saved passwords will sync to Edge starting June 2025. Plan your migration!
Microsoft will soon default new accounts to passwordless login with passkeys & MFA. Existing users can still choose passwords. Learn more!