Authentication

A phishing campaign uses fake AI assistant websites and browser-in-browser tricks to steal advertising account logins and MFA codes from agency staff and media buyers.

Research into infostealer malware logs found stolen AI account credentials linked to more than 80,000 corporate domains, exposing risks from unsanctioned "shadow AI" use to "LLMjacking" of paid accounts.

Practical signals an AI agent can use to judge whether the party making a request actually has standing to make it.

You are your own IT department. Here is the short, practical list of what actually matters for a one-person business, in the order it matters.

A calm, practical starting point for protecting your family's accounts, devices, and data, without needing to become a security expert first.

Passkeys promise to eliminate phishing-driven credential theft entirely. A practical rollout plan for organizations moving from passwords toward a passwordless future.

Passkeys let you sign in with your fingerprint or face instead of a password, and they're resistant to phishing by design. Here's how they work and how to start using them.

Why passwords get cracked, what makes a password strong, and practical ways to create passwords that are hard to break but easy to remember.

The single most effective step you can take to protect an account even if your password is stolen, with step-by-step setup for major platforms.