According to a PayPal notice of security incident dated January 18, attackers got unauthorized access to the accounts of thousands of users between December 6 and 8, 2022. The total number of accounts that were accessed by threat actors using a credential stuffing attack is reported as being 34,942. While accepting that PayPal is seemingly doing the best it can for the customers involved in this security incident by recommending password changes, Jasson Casey, chief technology officer at Beyond Identity insists that “passwords – whether unique or complex – are fundamentally flawed.” Instead, Casey says, organizations should be moving to phishing-resistant credentials such as the FIDO Alliance standard blueprints.


More

MobileIDWorld: Google Developing Passkey Transfer Feature for Android Password Manager

Google is developing a new feature that will allow secure passkey transfers between Android devices…

Read More →

Forbes: Google’s Gmail Upgrade—Good And Bad News For 3 Billion Users

Just days after Google confirmed it is bringing its next AI upgrade to Gmail, with major…

Read More →

TechRadar: Great news everyone! Google is going to let you transfer your passkeys to a new phone

Google’s password manager may soon allow you to transfer your passkeys to a new phone,…

Read More →