CFOtech Australia - Technology news for CFOs & financial decision-makers
Australia

FIDO2 Stories

Australian Stories

FIDO2 stories

HID pushes unified identity access across work & digital
Wearables

HID pushes unified identity access across work & digital

Passwordless logins are gaining traction as HID says employers want one credential for buildings, devices and cloud apps.

By Sean Mitchell • 4 min read • Last month
Phishing-resistant authentication can prevent tax-time fraud
Multi-factor authentication

Phishing-resistant authentication can prevent tax-time fraud

Fraudsters are exploiting tax season by stealing credentials and filing bogus returns, putting Australian refunds and ATO accounts at risk.

By Anthony Caruana • 5 min read • Tue, 30th Jun 2026
Why Australian tax agents need to secure every customer login to prevent the next wave of tax fraud
Data Protection

Why Australian tax agents need to secure every customer login to prevent the next wave of tax fraud

Stolen credentials are fuelling fraud as attackers bypass ATO controls, exposing taxpayers and forcing tax agents to harden logins.

By Geoff Schomburgk • 5 min read • Mon, 29th Jun 2026

Global Stories

FIDO2 stories

Seven Cyber Controls Businesses Can No Longer Afford to Overlook
Disaster Recovery

Seven Cyber Controls Businesses Can No Longer Afford to Overlook

Businesses face rising disruption unless seven basic cyber controls are properly integrated, tested and owned across identity, recovery and supplier access.

By Matthew Lowe • 4 min read • This month
Barracuda spots blob URL phishing in Microsoft browser
Multi-factor authentication

Barracuda spots blob URL phishing in Microsoft browser

Security teams may miss the attack because it leaves no persistent phishing site, instead building fake Microsoft login pages inside the browser.

By Sean Mitchell • 4 min read • Last month
Yubico expands OpenAI passkey partnership to Australia
Data Protection

Yubico expands OpenAI passkey partnership to Australia

Australian users of OpenAI's security programme will now need hardware-backed passkeys, as older sign-in methods are disabled for higher-risk accounts.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Google links UNC6671 to cloud extortion brand shift
Software-as-a-Service

Google links UNC6671 to cloud extortion brand shift

Google says the campaign is shifting towards financial and legal firms, with rebranded extortion sites still stealing cloud logins and tokens.

By Sean Mitchell • 4 min read • Fri, 7th Aug 2026
How can phishing-resistant authentication strengthen AML compliance across the accounting sector?
Data Protection

How can phishing-resistant authentication strengthen AML compliance across the accounting sector?

Phishing-resistant logins could curb account takeovers that let criminals tamper with tax data, refunds and audit trails across firms.

By Geoff Schomburgk • 6 min read • Mon, 3rd Aug 2026
Logokit phishing kit builds real-time fake login pages
Multi-factor authentication

Logokit phishing kit builds real-time fake login pages

Victims can be tricked more easily as Logokit now tailors fake login pages in real time, sending stolen credentials to Telegram bots.

By Joseph Gabriel Lagonsin • 4 min read • Thu, 30th Jul 2026
Yubico's YubiKey 5.8 adds digital signing features
Multi-factor authentication

Yubico's YubiKey 5.8 adds digital signing features

The update could let companies use a single security key to approve payments, documents and AI actions without custom cryptography.

By Mark Tarre • 4 min read • Wed, 22nd Jul 2026
OpenAI imposes passkey rule for high-risk ChatGPT users
Data Protection

OpenAI imposes passkey rule for high-risk ChatGPT users

Access to ChatGPT and GPT-5.6 is being tightened for some accounts as OpenAI moves to hardware-backed passkeys amid rising phishing risk.

By Sean Mitchell • 6 min read • Thu, 16th Jul 2026
Microsoft makes passkeys default for Entra ID logins
Public Cloud

Microsoft makes passkeys default for Entra ID logins

Users relying on SMS or voice for sign-ins will be nudged to passkeys as Microsoft phases out weaker multifactor methods in Entra ID.

By Sean Mitchell • 4 min read • Wed, 15th Jul 2026
OpenAI requires hardware-backed passkeys for cyber access
Data Protection

OpenAI requires hardware-backed passkeys for cyber access

Users who miss the deadline will lose access to OpenAI's most advanced cyber models, as the firm tightens defences against phishing.

By Sean Mitchell • 4 min read • Mon, 13th Jul 2026
Yubico launches Android passkey enabler for YubiKeys
Multi-factor authentication

Yubico launches Android passkey enabler for YubiKeys

Android users and IT teams can now deploy YubiKeys as hardware-backed passkeys, following Google Play Services support for NFC security keys.

By Mark Tarre • 4 min read • Tue, 7th Jul 2026
ExpressKeys adds passkeys & sharing in major update
Data Protection

ExpressKeys adds passkeys & sharing in major update

Users can now store passkeys and share vault items securely as ExpressKeys expands beyond basic password management in a major update.

By Joseph Gabriel Lagonsin • 4 min read • Fri, 3rd Jul 2026

Stories from Other Regions

FIDO2 stories

Zeta launches passkey authentication for RuPay payments
Multi-factor authentication

Zeta launches passkey authentication for RuPay payments

Eligible RuPay cardholders in India can now bypass SMS one-time passwords, cutting checkout time as digital-payment fraud climbs sharply.

By Karen Joy Bacudo • 4 min read • Last month
Why passkeys are becoming essential for modern cybersecurity
Data Protection

Why passkeys are becoming essential for modern cybersecurity

With phishing and stolen credentials driving most breaches, organisations are being urged to replace passwords with passkeys for safer logins.

By Martin Wegrostek • 4 min read • Fri, 26th Jun 2026