CISA has ordered U.S. federal agencies to patch a critical GeoServer vulnerability now actively exploited in XML External Entity (XXE) injection attacks. In such attacks, an XML input containing a ...

July 25 update: Expel has concluded after a review that MFA challenges failed and the attacker was never granted access to the requested resource. Our original July 17 article is below. A phishing ...

Update 7/25:25: Expel researchers have recanted their story, stating that while the the threat actors are attempting to use a phishing attacks to bypass FIDO authentication, the Cross-Device ...

With the introduction of the first official Valkey external authentication module, valkey-ldap, Valkey users can now be authenticated by both the external module, or internally by the ACL system. The ...

In the high-stakes world of cybersecurity, Chief Information Security Officers (CISOs) are constantly searching for authentication solutions that don’t just meet compliance requirements, but ...

A release from Thales, the French biometrics and digital identity firm, says it is launching OneWelcome FIDO Key Lifecycle Management, a new product to help large organizations deploy and manage FIDO ...

Yubico is most likely the first name that comes to mind when you think about two-factor authentication hardware keys and other secure authentication solutions. And for good reason: it has been leading ...