1월 20, 2023

Forbes: Thousands Of PayPal Accounts Hacked—Is Yours One Of Them?

According to a PayPal notice of security incident dated January 18, attackers got unauthorized access to the accounts of thousands of users between December 6 and 8, 2022. The total number of accounts that were accessed by threat actors using a credential stuffing attack is reported as being 34,942. While accepting that PayPal is seemingly doing the best it can for the customers involved in this security incident by recommending password changes, Jasson Casey, chief technology officer at Beyond Identity insists that “passwords – whether unique or complex – are fundamentally flawed.” Instead, Casey says, organizations should be moving to phishing-resistant credentials such as the FIDO Alliance standard blueprints.

MORE FIDO in the News


Biometric Update: Transparency can drive digital ID equity, policy forum panelists say

An event last week on ‘Identity, Authentication and the Road...

2월 3, 2023

Tech Republic: Unphishable mobile MFA through hardware keys

Passwords are a mess, MFA can be more of a...


Intelligent CISO: Passing on passwords in 2023 (finally)

Passwords are often an organisation’s weakest link. On World Password...


CyberWire: NIST on phishing resistance

According to NIST Special Publication DRAFT 800-63-B4, a phishing-resistant authenticator...

Download Authn Specs
Sign up for updates!Get news from FIDO Alliance in your inbox.

By submitting this form, you are consenting to receive communications from: FIDO Alliance, 3855 SW 153rd Drive, Beaverton, OR 97003, US, http://www.fidoalliance.org. You can revoke your consent to receive emails at any time by using the unsubscribe link found at the bottom of every email.