Security News

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Vulnerability allows Yubico security keys to be cloned Researchers have unearthed a cryptographic...

Researchers have unearthed a cryptographic vulnerability in popular Yubico (FIDO) hardware security keys and modules that may allow attackers to clone the devices. But the news is not as...

Derek Hanson, Yubico's VP of standards and alliances and an industry expert on passkeys, discusses why device-bound-to-shareable passkeys are critical. Derek Hanson, an expert on hardware-bound and syncable passkeys, works very closely with the FIDO Alliance and recently spoke on the topic of passkeys at the 2023 RSA Conference.

He asked Yubico for help deploying the security keys to the Ukrainian government. "We needed to have a lot of keys to deploy but we didn't have this amount of keys in our warehouse," he said.

Entrust announced a partnership with Yubico allowing U.S. federal agencies to issue YubiKey 5 Series and YubiKey 5 FIPS Series with Entrust derived PIV credentials to employees instantly, remotely and at scale. "The ability to issue derived PIV credentials from a credential management system directly to an alternative hardware token is a real game changer, providing strong security without the logistical challenges presented by physical PIV card issuance," said Suresh Kewalramani, Security Engineer, Department of Justice, Identity, Credential, and Access Management Services.

Yubico announced its next-generation FIPS security keys: the YubiKey 5 FIPS Series. The addition of the YubiKey 5 NFC, YubiKey 5C NFC, and YubiKey 5Ci into the FIPS series lineup significantly expands coverage for mobile-first environments that many organizations have been waiting for.

Security token biz Yubico has a new key out today, its latest-generation two-factor encryption authentication unit, the Yubico 5C NFC, which includes support for PCs and mobile devices using USB-C, as well as a built-in NFC radio. The last model offering USB-C lacked NFC - although it did come with a built-in Lightning plug, effectively covering all the bases of the mobile market.

Yubico, the leading provider of hardware authentication security keys, announced the release of YubiEnterprise Delivery, a new cloud-based service that allows organizations to ship YubiKeys directly to employees, partners, and customers across the globe. YubiEnterprise Delivery is designed to provide IT teams with powerful capabilities to manage the delivery of YubiKey devices to remote employees, mitigating the complications of hardware distribution while helping to accelerate the adoption of strong multi-factor authentication.

Yubico, the leading provider of hardware authentication security keys, announced the initial availability of YubiEnterprise Services, the company's first service-based offering designed to transform the way that enterprises purchase, distribute and manage YubiKeys. With subscription and delivery self-service options, YubiEnterprise Services will equip organizations with a simple and efficient way to deploy strong authentication at scale.

RSA, a global cybersecurity leader delivering Business-Driven Security solutions to help organizations manage digital risk, will extend its enterprise offering of modern authentication and...