NIST and CISA release a draft interagency report for public comment on protecting authentication tokens from tampering, theft, and misuse.

The U.S. Army’s wearable authentication tokens intended for the tactical environment could be used for nontactical purposes, such as accessing strategic-level systems, enterprise networks and medical ...

Device code phishing abuses the OAuth device flow, and Google and Azure produce strikingly different attack surfaces. Register for Huntress Labs' Live Hack to learn about attack techniques, defensive ...

Passwords and app-based MFA add hidden costs through lost productivity, frequent resets, and risk of phishing and social ...

Look out, Frodo — we might have a new "One Ring to rule them all." Token, a new smart ring, promises to give its wearers a chance to make mobile payments, unlock doors, and ditch their passwords — all ...

With no shortage of cybersecurity risks in state and local government, state CIOs expect enterprise identity and access management solution adoption or expansion to be the cybersecurity initiative ...

The Internet Engineering Task Force (IETF) --the organization that develops and promotes Internet standards-- has approved three new standards this week designed to improve the security of ...

My problem with taking the second option is that it's highly unlikely anyone will do the research needed to determine the true cause of a hack. CYA for the company rather than encouraging better ...

Authenticator apps are available for every popular mobile platform, including iOS (shown here), Android, and Windows Phone Passwords alone are hopelessly weak and fragile security measures. Don’t be ...