Fido2 — Cyber Threats, Attacks & Incidents

Overview

FIDO2 is a WebAuthn/CTAP-based authentication platform that enables passwordless, phishing-resistant logins using public-key cryptography. It aims to replace or augment passwords and traditional MFA, reducing credential theft and phishing risks; recent coverage shows its growing adoption in enterprise security, including banking deployments delivered via cloud-based solutions.

Related Threat Clusters

• University of Pennsylvania SSO Breach Exposes 1.2 Million Records

  In 2025, the University of Pennsylvania suffered a significant data breach due to a compromised single sign-on (SSO) account. Attackers accessed the PennKey SSO, infiltrating internal systems including VPN, Salesforce,…

  2 articles · Updated July 29, 2026
• Identity-Based Attacks Target Authentication Systems and Credentials

  Recent identity-based attacks have exploited vulnerabilities in authentication systems, targeting credentials and identity infrastructure. Notable incidents include the compromise of over 18,000 routers by APT28 to…

  59 articles · Updated May 29, 2026
• Microsoft Transitions to Passkeys, Phasing Out SMS and Voice Authentication by 2027

  Microsoft has announced that starting September 1, 2026, passkeys will become the default authentication method for Entra ID, replacing SMS and voice-based multifactor authentication. This change is aimed at enhancing…

  38 articles · Updated July 14, 2026
• Token Launches Biometric Identity Protection for Salesforce Amid Rising Cyber Threats

  Token has introduced its TokenCore Wearable and TokenCore Portable products to enhance identity protection for Salesforce users. This initiative responds to increasing risks from AI-driven phishing, credential theft,…

  2 articles · Updated June 9, 2026
• UK Retail Cyber Attacks Show No Seasonal Spike Amid Holiday Concerns

  Analysis of cybersecurity incidents in the UK retail and manufacturing sectors reveals that 1,381 breaches occurred between Q3 2024 and Q2 2025, with no significant concentration around major shopping events. Security…

  61 articles · Updated November 28, 2025
• Yubico Offers Security Tips and Discounts for Online Shopping Amid Holiday Threats

  On November 7, 2025, Yubico announced essential tips for securing online shopping accounts during the holiday season, which is known for increased cyber threats. The company also revealed a significant sale of 30% off…

  3 articles · Updated November 6, 2025
• LoginTC Introduces Phishing-Resistant Biometric Smart Card Authentication

  LoginTC has launched a FIDO2 Biometric Smart Card authentication system that enhances security for Windows, Remote Desktop, and offline logins. This innovation aims to mitigate phishing attacks by integrating biometric…

  2 articles · Updated July 23, 2026
• UK NCSC Endorses Passkeys as Default Authentication Method

  The UK's National Cyber Security Centre (NCSC) has officially recommended that businesses adopt passkeys as the default authentication method for consumers, marking a significant shift away from traditional passwords.…

  14 articles · Updated April 24, 2026
• OpenAI Mandates Passkeys for Enhanced AI Model Security

  On June 1, 2026, OpenAI announced a requirement for users in its Trusted Access for Cyber (TAC) program to implement passkeys for accessing its most powerful AI models. This initiative, in partnership with Yubico, aims…

  8 articles · Updated June 1, 2026
• MFA Adoption Lags Despite Rising Credential-Based Attack Risks

  As of 2025, only about 40% of organizations implement multi-factor authentication (MFA) as standard practice, leaving them vulnerable to credential-based attacks. Michael Downs, Vice President of Global Sales at…

  2 articles · Updated December 3, 2025

Recent Intelligence Reports

• Is Your SSO Protected Against Modern Credential Attacks? — Bleepingcomputer · July 28, 2026
• Biometric FIDO2 Smart Card authentication — www.logintc.com · July 23, 2026
• Microsoft makes passkeys the default in Entra ID — Heise.De · July 14, 2026
• Where Organizations Fall Short with MFA — Infosecurity-Magazine · July 7, 2026
• Token Announces Leading Biometric Assured Identity Protection for Salesforce Access — Au.Finance.Yahoo · June 9, 2026
• Yubico Partners with OpenAI to Support Passkey Mandate for its Trusted Access for Cyber ... — Markets.Ft · June 1, 2026
• NCSC Backs Passkeys, Hailing a New Era of Sign — Infosecurity-Magazine · April 23, 2026
• Glide Identity Selected as Top 10 Finalist for RSAC 2026 Conference Innovation Sandbox Contest — Morningstar · February 10, 2026

Related Entities