Tech News
← Home  ·  All topics

Security Keys

2 GoKawiil briefs on this topic

Opinion piece warns passkeys shift login control away from users

A commentary argues that passkeys, the passwordless login standard promoted across major websites, give platforms more control over credentials than passwords, authenticator apps or hardware security keys ever did. The piece traces passkeys to the FIDO Alliance, a coalition of tech companies, banks, governments and nonprofits like Mozilla, and claims each member has its own motive for pushing adoption. It contends users should be wary because websites can progressively restrict how passkeys are used or transferred.

Attackers Bypass MFA by Targeting Help Desk Account Recovery Processes

Security researchers note that as MFA, conditional access and device trust make direct credential theft harder, attackers are shifting focus to account recovery workflows. Instead of stealing a user's second authentication factor, criminals are tricking service desk staff into resetting or reassigning it on their behalf.