Tag
13 articles
Learn how to implement device-bound session protection in web applications, a security technique that ties user sessions to specific devices to prevent account takeovers.
A new security flaw in passkey implementations reveals how Windows systems are treated differently from other operating systems, potentially exposing user credentials. Researchers are calling for stricter auditing of passkey applications as the technology becomes more widespread.
Microsoft is remaking its tech stack for the AI era by phasing out OpenAI models and eliminating SMS-based login methods to combat AI-powered phishing.
Dashlane explains how attackers downloaded encrypted password vaults by targeting large numbers of users, exploiting authentication weaknesses and automated tools.
As AI agents and MCP servers become mainstream, authentication platforms are emerging as a critical infrastructure choice. A new guide ranks the top eight platforms based on compliance, integration, and real-world deployment fit for 2026.
WorkOS has launched auth.md, an open agent registration protocol built on OAuth standards that streamlines how AI agents authenticate and register with web applications.
OpenAI has launched Advanced Account Security featuring phishing-resistant login, stronger recovery mechanisms, and enhanced protections to prevent account takeovers.
OpenAI introduces advanced security features for ChatGPT accounts, including a partnership with Yubico to provide hardware-based authentication.
OpenAI has introduced a new Advanced Account Security feature for ChatGPT that requires hardware keys for authentication, eliminating passwords and email recovery options.
FIDO Alliance, Google, and Mastercard collaborate to prevent AI agents from making unauthorized purchases using users' credit cards.
Learn how to build a secure web application that properly handles user credentials using Node.js and Express, with practical examples of secure password storage and authentication.
This article explains the technical foundations of passwordless authentication, why its widespread adoption has been delayed, and what businesses should do now to prepare for the transition.
