According to a PayPal notice of security incident dated January 18, attackers got unauthorized access to the accounts of thousands of users between December 6 and 8, 2022. The total number of accounts that were accessed by threat actors using a credential stuffing attack is reported as being 34,942. While accepting that PayPal is seemingly doing the best it can for the customers involved in this security incident by recommending password changes, Jasson Casey, chief technology officer at Beyond Identity insists that “passwords – whether unique or complex – are fundamentally flawed.” Instead, Casey says, organizations should be moving to phishing-resistant credentials such as the FIDO Alliance standard blueprints.


More

9to5Mac: Apple @ Work: Passkey portability is finally here in iOS 26 and macOS Tahoe 26

With iOS 26 and macOS Tahoe 26, Apple is solving a key problem, though For…

Read More →

Reddit Implements Mandatory ID Verification for UK Users Under Online Safety Act

Reddit has implemented mandatory age verification for UK users to comply with the country’s Online…

Read More →

National World: 16 billion passwords leaked: How to protect yourself as cybersecurity experts warn of repeat attacks

Cybersecurity experts are urging internet users to take immediate steps to secure their online accounts,…

Read More →