CFOtech Australia - Technology news for CFOs & financial decision-makers
Australia

Security Keys Stories

Australian Stories

Security Keys stories

Phishing-resistant authentication can prevent tax-time fraud
Multi-factor authentication

Phishing-resistant authentication can prevent tax-time fraud

Fraudsters are exploiting tax season by stealing credentials and filing bogus returns, putting Australian refunds and ATO accounts at risk.

By Anthony Caruana • 5 min read • Tue, 30th Jun 2026
Why Australian tax agents need to secure every customer login to prevent the next wave of tax fraud
Data Protection

Why Australian tax agents need to secure every customer login to prevent the next wave of tax fraud

Stolen credentials are fuelling fraud as attackers bypass ATO controls, exposing taxpayers and forcing tax agents to harden logins.

By Geoff Schomburgk • 5 min read • Mon, 29th Jun 2026

Global Stories

Security Keys stories

Google links UNC6671 to cloud extortion brand shift
Software-as-a-Service

Google links UNC6671 to cloud extortion brand shift

Google says the campaign is shifting towards financial and legal firms, with rebranded extortion sites still stealing cloud logins and tokens.

By Sean Mitchell • 4 min read • This month
How can phishing-resistant authentication strengthen AML compliance across the accounting sector?
Data Protection

How can phishing-resistant authentication strengthen AML compliance across the accounting sector?

Phishing-resistant logins could curb account takeovers that let criminals tamper with tax data, refunds and audit trails across firms.

By Geoff Schomburgk • 6 min read • This month
Security leaders warn as AI bot traffic overtakes humans
Robotics

Security leaders warn as AI bot traffic overtakes humans

Automated requests now make up most web traffic, raising costs for sites and sharpening fears over AI-driven fraud and phishing.

By Sean Mitchell • 4 min read • Last month
Logokit phishing kit builds real-time fake login pages
Multi-factor authentication

Logokit phishing kit builds real-time fake login pages

Victims can be tricked more easily as Logokit now tailors fake login pages in real time, sending stolen credentials to Telegram bots.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Microsoft makes passkeys default for Entra ID logins
Public Cloud

Microsoft makes passkeys default for Entra ID logins

Users relying on SMS or voice for sign-ins will be nudged to passkeys as Microsoft phases out weaker multifactor methods in Entra ID.

By Sean Mitchell • 4 min read • Last month
OpenAI requires hardware-backed passkeys for cyber access
Data Protection

OpenAI requires hardware-backed passkeys for cyber access

Users who miss the deadline will lose access to OpenAI's most advanced cyber models, as the firm tightens defences against phishing.

By Sean Mitchell • 4 min read • Last month
Yubico launches Android passkey enabler for YubiKeys
Multi-factor authentication

Yubico launches Android passkey enabler for YubiKeys

Android users and IT teams can now deploy YubiKeys as hardware-backed passkeys, following Google Play Services support for NFC security keys.

By Mark Tarre • 4 min read • Last month
Yubico wins FIPS 140-3 nod for YubiKey 5 FIPS Series
Multi-factor authentication

Yubico wins FIPS 140-3 nod for YubiKey 5 FIPS Series

The upgrade gives government and regulated buyers a single device for legacy smart cards and passkeys, as agencies shift to stricter security rules.

By Joseph Gabriel Lagonsin • 4 min read • Thu, 28th May 2026
OpenAI & Yubico launch phishing-resistant YubiKeys
Data Protection

OpenAI & Yubico launch phishing-resistant YubiKeys

ChatGPT users can now buy a discounted two-pack of hardware keys designed to block phishing and protect sensitive accounts.

By Mark Tarre • 4 min read • Fri, 1st May 2026
Bitdefender warns journalists on phishing & source safety
Malware

Bitdefender warns journalists on phishing & source safety

Reporters face rising risks from phishing, spyware and device compromise as Bitdefender urges tighter source protection and account security.

By Sofiah Nichole Salivio • 4 min read • Tue, 28th Apr 2026
Yubico appoints chief marketing officer as phishing grows
Digital Transformation

Yubico appoints chief marketing officer as phishing grows

Rising AI-driven attacks are pushing firms towards phishing-resistant logins, sharpening demand for hardware-backed authentication across the sector.

By Joseph Gabriel Lagonsin • 4 min read • Tue, 31st Mar 2026
Yubico expands YubiKey enrolment for Microsoft, Ping
Data Protection

Yubico expands YubiKey enrolment for Microsoft, Ping

Yubico expands YubiKey enrolment tools for Microsoft Entra ID and Ping, aiming to simplify passwordless onboarding and account recovery.

By Joseph Gabriel Lagonsin • 3 min read • Tue, 24th Mar 2026
Yubico & Delinea link AI actions to human approval
Data Protection

Yubico & Delinea link AI actions to human approval

Yubico and Delinea unite hardware keys with identity checks to ensure each high‑risk AI agent action is explicitly approved by a human.

By Sean Mitchell • 4 min read • Mon, 23rd Mar 2026
LastPass unveils browser-based Secure Access Essentials
Encryption

LastPass unveils browser-based Secure Access Essentials

LastPass launches Secure Access Essentials, a browser-focused suite to secure access to workplace apps, SaaS and unsanctioned AI tools.

By Mark Tarre • 4 min read • Wed, 11th Mar 2026
Account Takeover (ATO) fraud: The hidden threat to your business and how to stop it
Malware

Account Takeover (ATO) fraud: The hidden threat to your business and how to stop it

Silent account takeover fraud is draining billions as criminals hijack real identities; here's how businesses can finally fight back.

By Bobby Joseph • 6 min read • Wed, 4th Mar 2026

Stories from Other Regions

Security Keys stories