Passkeys not your thing? Bankr now supports authenticator apps (OTP) for MFA.
Scan the QR code, enter the 6-digit code, done. Works with any OTP app like Google Authenticator, 1Password, or Apple Passwords.
Hackers are now using passkeys as bait to target Microsoft 365 accounts.
The scam is pretty simple:
>Attackers pretend to be IT support and tell employees they need to set up or update a passkey.
>They then send them to a fake Microsoft login page.
>The page looks legitimate, but it’s actually designed to trick people into giving the attackers access to their account.
>Once they get in, hackers can add their own way to log in and keep access searching through emails, SharePoint and OneDrive files and steal sensitive company data.
Fix for passkeys is in, cc @clerk I cut an issue for the electron package (ty for rushing that out for us!)
Built, filled and merged all from my phone with T3 Code
Face ID. Fingerprints. Passkeys.
All built for a different internet.
VeryAI introduces a different approach:
→ Palm biometrics (not publicly available data)
→ Works on any smartphone
→ Person-bound identity
→ Built-in liveness + AI resistant
This is what identity looks like in an AI native internet.
WEB3’S NEXT SECURITY RACE 🔐
Stellar’s Bell upgrade is live on testnet, adding post-quantum verification for smart contracts. Mainnet vote: Nov. 23.
What scales first: passkeys or quantum-safe accounts?
Technology builds. Markets price the timeline.
#Foreso# #Web3Security# #Stellar#
mSecure password manager has been hacked, with attackers stealing an encrypted database containing customer information.
mSeven Software is now warning current and former users to secure their accounts.
The company recommends:
- Changing passwords stored in mSecure.
- Resetting two-factor authentication (2FA).
- Removing existing passkeys.
The breach reportedly affects users who synced their vaults through mSecure Cloud.
$ZEC brings the privacy. $NEAR makes it programmable.
On you trade across chains from one self-custodial account with passkeys: no wallet switching, a confidential black box.
The first $ZEC lending pool on $NEAR runs on $RHEA.
Coinbase says Amplitude exposed some customer contact data, with no evidence of access to Coinbase systems.
Citing four disclosed data leaks, @cz_binance urged users to swap SMS codes for passkeys or hardware security keys.
via @hardeyjumoh