Many of the implemented authentication methods are not phishing-resistant, as the current case shows. One solution here is a FIDO-based authentication solution, which can best be implemented with a hardware-based security key that enables secure MFA by means of hardware tokens and whose MITM protection mechanisms from FIDO also take effect in the event of AiTM attacks.


More

Engadget: Lenovo and Intel take the first step toward eliminating passwords

Lenovo and Intel announced the first built-in authentication for PCs that adheres to all published…

Read More →

CIO Insight: What New NIST Guidelines Mean for Passwords

FIDO Alliance Executive Director Brett McDowell breaks down the updated NIST guidance, looking at the…

Read More →

Wired: Google’s ‘Advanced Protection’ Locks Down Accounts Like Never Before

Wired reports that Google has rolled out its Advanced Protection service, where personal Google account…

Read More →