February 3, 2023

NIST: Phishing Resistance – Protecting the keys to your kingdom

Phishing refers to a variety of attacks that are intended to convince you to forfeit sensitive data to an imposter. These attacks can take a number of different forms; from spear-phishing (which targets a specific individual within an organization), to whaling (which goes one step further and targets senior executives or leaders). Furthermore, phishing attacks take place over multiple channels or even across channels; from the more traditional email-based attacks to those using voice – vishing – to those coming via text message – smishing. Regardless of the type or channel, the intent of the attack is the same – to exploit human nature to gain control of sensitive information (citation 1). These attacks typically make use of several techniques including impersonated websites, attacker-in-the-middle, and relay or replay to achieve their desired outcome.

MORE FIDO in the News


Journal du Net: Digital accessibility: Why CIOs should make it a priority

In this byline, Andrew Shikiar explains how simple and safe...

March 23, 2023

L’Eclaireur FNAC: How password managers are preparing for a future … without passwords

Passwordless authentication has the potential to continue to grow in...


ComputerWeekly: Accessible authentication: What companies need to consider  

In this byline, Andrew Shikiar, executive director and CMO of...


Communications of the ACM: Passkeys unlock a new era for authentication

Until recently, replacing passwords has ranked somewhere between tricky and...

Download Authn Specs
Sign up for updates!Get news from FIDO Alliance in your inbox.

By submitting this form, you are consenting to receive communications from: FIDO Alliance, 3855 SW 153rd Drive, Beaverton, OR 97003, US, http://www.fidoalliance.org. You can revoke your consent to receive emails at any time by using the unsubscribe link found at the bottom of every email.