Meta has announced new WhatsApp account security features, including support for multiple passkeys per account on both iOS and Android, enhancing phishing-resistant…
Three independent research efforts presented at Black Hat USA 2026 and in subsequent disclosures have demonstrated practical attacks against passkey implementations, undermining…
Windows stores past YubiKey signatures in cleartext, which can be read by unprivileged users and replayed to impersonate users. This issue is…
Unit 42 demonstrated that Google Password Manager's synced passkeys can be compromised via the Security Domain Secret, allowing recovery of private keys.…
Account takeover (ATO) attacks are shifting from credential stuffing to targeting identity verification and recovery layers as passkeys become mainstream. According to…
The FIDO Alliance is an industry consortium that develops open standards for passwordless authentication, including passkeys. Their 2026 research shows 75% of…
WhatsApp now supports multiple passkeys for phishing-resistant sign-ins on iOS and Android, and has upgraded two-step verification from a six-digit PIN to…
Meta, the parent company of WhatsApp, announced new security features including multiple passkeys per account and an upgraded two-step verification password system…