Passkeys Are Replacing Passwords Faster Than Expected
Major platforms now offer passkeys by default, and the underlying idea removes the attack that causes most account compromises.
Announcements
Service announcements, maintenance windows and product changes.
Major platforms now offer passkeys by default, and the underlying idea removes the attack that causes most account compromises.
Encryption is no longer the main threat. Increasingly, attackers copy data and threaten publication.
Compromising a dependency reaches everyone who installs it, which makes it an efficient attack and a hard one to defend.
The pattern across recent reporting is larger peaks over shorter windows, often as a distraction.
Reverse-proxy phishing relays credentials and one-time codes in real time, which defeats SMS and app-based factors.
Post-quantum algorithms are being adopted in browsers and TLS libraries ahead of any practical quantum threat.
Shared vaults have replaced spreadsheets and messaging apps for credential handling in many small teams.