Category Archives: webauthn

Google hasn’t suffered an employee phishing compromise in over a year

Posted on by

Phishing attackers have failed to compromise a single employee account at Google since the company mandated authentication using U2F hardware tokens in early 2017. That’s the remarkable claim made to security writer Brian Krebs. Continue reading Google hasn’t suffered an employee phishing compromise in over a year→

Google: Security Keys Neutralized Employee Phishing

Posted on by

Google has not had any of its 85,000+ employees successfully phished on their work-related accounts since early 2017, when it began requiring all employees to use physical Security Keys in place of passwords and one-time codes, the company told KrebsOnSecurity. Continue reading Google: Security Keys Neutralized Employee Phishing→

WebAuthn, Passwordless Authentication

Posted on by

via Peter Bright writing at Ars Technica, comes an interesting piece discussing the efforts to implement and deploy WebAuthn, the so-called passwordless authentican scheme promulgated by the W3C, and fully implemented in Mozilla Firefox 60 anf Google … Continue reading WebAuthn, Passwordless Authentication→