SecurityBrief UK - Technology news for CISOs & cybersecurity decision-makers
United Kingdom

FIDO2 Stories

UK Stories

FIDO2 stories

Millions of UK adults reuse passwords, survey warns
Multi-factor authentication

Millions of UK adults reuse passwords, survey warns

More than six million Britons may be exposing accounts to hackers by using one password across email, banking, shopping and social media.

By Sofiah Nichole Salivio • 5 min read • Fri, 8th May 2026

Global Stories

FIDO2 stories

How can phishing-resistant authentication strengthen AML compliance across the accounting sector?
Data Protection

How can phishing-resistant authentication strengthen AML compliance across the accounting sector?

Phishing-resistant logins could curb account takeovers that let criminals tamper with tax data, refunds and audit trails across firms.

By Geoff Schomburgk • 6 min read • This month
Logokit phishing kit builds real-time fake login pages
Multi-factor authentication

Logokit phishing kit builds real-time fake login pages

Victims can be tricked more easily as Logokit now tailors fake login pages in real time, sending stolen credentials to Telegram bots.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Yubico's YubiKey 5.8 adds digital signing features
Multi-factor authentication

Yubico's YubiKey 5.8 adds digital signing features

The update could let companies use a single security key to approve payments, documents and AI actions without custom cryptography.

By Mark Tarre • 4 min read • Last month
OpenAI imposes passkey rule for high-risk ChatGPT users
Data Protection

OpenAI imposes passkey rule for high-risk ChatGPT users

Access to ChatGPT and GPT-5.6 is being tightened for some accounts as OpenAI moves to hardware-backed passkeys amid rising phishing risk.

By Sean Mitchell • 6 min read • Last month
Microsoft makes passkeys default for Entra ID logins
Public Cloud

Microsoft makes passkeys default for Entra ID logins

Users relying on SMS or voice for sign-ins will be nudged to passkeys as Microsoft phases out weaker multifactor methods in Entra ID.

By Sean Mitchell • 4 min read • Last month
OpenAI requires hardware-backed passkeys for cyber access
Data Protection

OpenAI requires hardware-backed passkeys for cyber access

Users who miss the deadline will lose access to OpenAI's most advanced cyber models, as the firm tightens defences against phishing.

By Sean Mitchell • 4 min read • Last month
Yubico launches Android passkey enabler for YubiKeys
Multi-factor authentication

Yubico launches Android passkey enabler for YubiKeys

Android users and IT teams can now deploy YubiKeys as hardware-backed passkeys, following Google Play Services support for NFC security keys.

By Mark Tarre • 4 min read • Last month
ExpressKeys adds passkeys & sharing in major update
Data Protection

ExpressKeys adds passkeys & sharing in major update

Users can now store passkeys and share vault items securely as ExpressKeys expands beyond basic password management in a major update.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Yubico wins FIPS 140-3 nod for YubiKey 5 FIPS Series
Multi-factor authentication

Yubico wins FIPS 140-3 nod for YubiKey 5 FIPS Series

The upgrade gives government and regulated buyers a single device for legacy smart cards and passkeys, as agencies shift to stricter security rules.

By Joseph Gabriel Lagonsin • 4 min read • Thu, 28th May 2026
Google flags KnowledgeDeliver flaw & Chinese phishing surge
Multi-factor authentication

Google flags KnowledgeDeliver flaw & Chinese phishing surge

A zero-day in a widely used Japanese learning platform let hackers plant malware, while Chinese phishing services are now bypassing one-time codes.

By Sofiah Nichole Salivio • 5 min read • Wed, 27th May 2026
Why 'strong passwords' can't save you from AI
Ransomware

Why 'strong passwords' can't save you from AI

AI has made stolen credentials and careless copy-paste habits a bigger risk than password strength, with scams and breaches accelerating.

By Raymond Schippers • 4 min read • Wed, 6th May 2026
Saiga phishing kit returns to bypass multifactor auth
Firewalls

Saiga phishing kit returns to bypass multifactor auth

Session cookie theft lets attackers slip past multifactor checks, putting enterprise email accounts at risk even after login.

By Sean Mitchell • 4 min read • Tue, 5th May 2026
OpenAI & Yubico launch phishing-resistant YubiKeys
Data Protection

OpenAI & Yubico launch phishing-resistant YubiKeys

ChatGPT users can now buy a discounted two-pack of hardware keys designed to block phishing and protect sensitive accounts.

By Mark Tarre • 4 min read • Fri, 1st May 2026

Stories from Other Regions

FIDO2 stories

Why Australian tax agents need to secure every customer login to prevent the next wave of tax fraud
Data Protection

Why Australian tax agents need to secure every customer login to prevent the next wave of tax fraud

Stolen credentials are fuelling fraud as attackers bypass ATO controls, exposing taxpayers and forcing tax agents to harden logins.

By Geoff Schomburgk • 5 min read • Mon, 29th Jun 2026
Access all areas with 1 credential: Why Australian workplaces need identity convergence now
Digital Transformation

Access all areas with 1 credential: Why Australian workplaces need identity convergence now

Rising cyber threats and hybrid work are pushing Australian employers to replace scattered badges, passwords and tokens with one credential.

By Steve Katanas • 5 min read • Thu, 18th Jun 2026
Experts warn passwords no longer sufficient in AI era
Ransomware

Experts warn passwords no longer sufficient in AI era

Australian firms are being urged to adopt passwordless logins as AI tools and data leakage make stolen credentials easier to exploit.

By Mark Tarre • 10 min read • Thu, 7th May 2026