According to a PayPal notice of security incident dated January 18, attackers got unauthorized access to the accounts of thousands of users between December 6 and 8, 2022. The total number of accounts that were accessed by threat actors using a credential stuffing attack is reported as being 34,942. While accepting that PayPal is seemingly doing the best it can for the customers involved in this security incident by recommending password changes, Jasson Casey, chief technology officer at Beyond Identity insists that “passwords – whether unique or complex – are fundamentally flawed.” Instead, Casey says, organizations should be moving to phishing-resistant credentials such as the FIDO Alliance standard blueprints.


More

Gov Info Security: New FIDO Protocol Simplifies IoT Device Onboarding

Andrew Shikiar, executive director at the FIDO Alliance, notes: “Businesses recognize the huge potential of…

Read More →

Mobile ID World: FIDO Survey Finds Evidence of Lax Security On Social Media

The FIDO Alliance has released a new report that captures the scope of the social…

Read More →

ITProPortal: Social Media Hacks have Affected Half of Brits

Social media hacks have become a serious problem for users, with roughly half of Brits…

Read More →