
mSecure urges password and passkey resets after suspicious activity
mSeven has not said whether vaults were accessed, how many customers are affected, or what occurred.
43 stories, newest first · one card per story

mSeven has not said whether vaults were accessed, how many customers are affected, or what occurred.
A November 3 customer email recommends password, 2FA, and passkey changes but names no exposed data.

A successful passkey login does not prove the account, device, or later session should still be trusted.

Worldwide and GCC tenants must move telephone-only users to passkeys or another provider before February 1, 2027.

Retirement of Microsoft-provided phone authentication starts February 1, 2027, in Worldwide and Government Community Cloud tenants.
Microsoft-provided SMS and voice MFA end February 1, 2027 for workforce tenants, not Azure AD B2C or Entra External ID.

Versions before 6.2606.4246 are affected; Microsoft rated CVE-2026-80097 at CVSS 8.6 and shipped a fix on September 8, 2026.
The victim entered a password and two 2FA codes; attackers then viewed two Drive spreadsheets and deleted the lure.
Critics say sites could later reject non-attested passkeys; Apple and FIDO participants say consumer attestation is not the goal.

Of 700 decision-makers, 95% saw login workarounds and 28% confirmed account-recovery abuse attempts.
Huntress says the EvilTokens device-code phishing kit hit 344 organizations without breaking passkey cryptography.

Dashlane says monthly passkey authentications nearly doubled to 2.5 million, while major-site adoption stays low.

Yubico and Okta found nearly half of security professionals still use passwords while AI-driven phishing rises.

UK Report Fraud urges passkey adoption after email and social media account takeover losses surged to £6.3m, up from £1.2m.

A 2026 roundup names Microsoft the best workforce passwordless start and HYPR the dedicated platform.

A 2026 comparison ranks 12 SSO platforms, favoring Microsoft Entra ID for Microsoft 365 and Okta for mixed SaaS.

A 2026 buyer's guide ranks 12 IAM products, favoring Entra ID and Okta for workforce identity.

Opinion piece argues push and SMS/OTP MFA remain phishable via fatigue attacks, SIM swaps, and real-time proxy kits, urging phased FIDO2/passkey migration.

Meta's One Step Ahead anti-scam campaign reached 303 million people across 18 Asia-Pacific countries.

A 2026 ranking scores ten adaptive authentication tools, placing Microsoft Conditional Access first.

A 2026 ranking names Auth0, Microsoft Entra External ID, and Firebase Auth the leading authentication-as-a-service providers.

A 2026 ranking scores ten CIAM platforms, placing Okta Auth0 first ahead of Microsoft Entra External ID and Ping.

A 2026 ranking names Microsoft the top passwordless authentication option, ahead of Okta FastPass and Yubico.

Microsoft will block SMS first-factor sign-in for Entra ID workforce tenants worldwide on February 1, 2027.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views