According to a PayPal notice of security incident dated January 18, attackers got unauthorized access to the accounts of thousands of users between December 6 and 8, 2022. The total number of accounts that were accessed by threat actors using a credential stuffing attack is reported as being 34,942. While accepting that PayPal is seemingly doing the best it can for the customers involved in this security incident by recommending password changes, Jasson Casey, chief technology officer at Beyond Identity insists that “passwords – whether unique or complex – are fundamentally flawed.” Instead, Casey says, organizations should be moving to phishing-resistant credentials such as the FIDO Alliance standard blueprints.


More

InfoSecurity Magazine: #Infosec2024: CISOs Need to Move Beyond Passwords to Keep Up With Security Threats

Passwordless systems, even if they stop short of a full zero-trust environment, improve convenience as…

Read More →

SC Media: Identiverse 2024: Deepfakes, passkeys and more

Two predominant themes stood out at last week’s Identiverse 2024 conference in Las Vegas. First,…

Read More →

CXMToday: Visa Unveils Card Updates

Built on the latest Fast Identity Online (FIDO) standards, the Visa Payment Passkey Service confirms a…

Read More →


123246 Next