According to a PayPal notice of security incident dated January 18, attackers got unauthorized access to the accounts of thousands of users between December 6 and 8, 2022. The total number of accounts that were accessed by threat actors using a credential stuffing attack is reported as being 34,942. While accepting that PayPal is seemingly doing the best it can for the customers involved in this security incident by recommending password changes, Jasson Casey, chief technology officer at Beyond Identity insists that “passwords – whether unique or complex – are fundamentally flawed.” Instead, Casey says, organizations should be moving to phishing-resistant credentials such as the FIDO Alliance standard blueprints.
More FIDO in the News
CNET: A physical key is the secret to Google employees’ online security
CNET explains that the FIDO Security Key is the secret to Google’s employees’ online security.
Krebs on Security: Google: Security Keys Neutralized Employee Phishing
Well-known cybersecurity expert and influencer Brian Krebs breaks down how FIDO Authentication using Security Keys…
Dark Reading: Beyond Passwords: Why Your Company Should Rethink Authentication
This article highlights the work the FIDO Alliance is doing to develop ubiquitous, technology-agnostic security…
Subscribe to the FIDO newsletter
Stay Connected, Stay Engaged
Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.
"*" indicates required fields
