Many of the implemented authentication methods are not phishing-resistant, as the current case shows. One solution here is a FIDO-based authentication solution, which can best be implemented with a hardware-based security key that enables secure MFA by means of hardware tokens and whose MITM protection mechanisms from FIDO also take effect in the event of AiTM attacks.


More

TEISS: SMS Authentication: why it’s bad (and what to do instead)

Twitter’s Account Security Report shows users still opt for SMS authentication. Andrew Shikiar at the…

Read More →

Global Security Mag: Technology protect against phishing, not training

A byline from by Andrew Shikiar, Executive Director of the FIDO Alliance on the cyber risks…

Read More →

InfoSecurity: Podcast

In the September episode of the IntoSecurity podcast, the Infosecurity editorial team take a deep…

Read More →


Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.