SecurityBrief New Zealand - Technology news for CISOs & cybersecurity decision-makers
New Zealand

FIDO2 Stories

Kiwi Stories

FIDO2 stories

Global Stories

FIDO2 stories

OpenAI requires hardware-backed passkeys for cyber access
Data Protection

OpenAI requires hardware-backed passkeys for cyber access

Users who miss the deadline will lose access to OpenAI's most advanced cyber models, as the firm tightens defences against phishing.

By Sean Mitchell • 4 min read • 3 days ago
Yubico launches Android passkey enabler for YubiKeys
Multi-factor authentication

Yubico launches Android passkey enabler for YubiKeys

Android users and IT teams can now deploy YubiKeys as hardware-backed passkeys, following Google Play Services support for NFC security keys.

By Mark Tarre • 4 min read • Last week
ExpressKeys adds passkeys & sharing in major update
Data Protection

ExpressKeys adds passkeys & sharing in major update

Users can now store passkeys and share vault items securely as ExpressKeys expands beyond basic password management in a major update.

By Joseph Gabriel Lagonsin • 4 min read • This month
Yubico wins FIPS 140-3 nod for YubiKey 5 FIPS Series
Multi-factor authentication

Yubico wins FIPS 140-3 nod for YubiKey 5 FIPS Series

The upgrade gives government and regulated buyers a single device for legacy smart cards and passkeys, as agencies shift to stricter security rules.

By Joseph Gabriel Lagonsin • 4 min read • Thu, 28th May 2026
Google flags KnowledgeDeliver flaw & Chinese phishing surge
Multi-factor authentication

Google flags KnowledgeDeliver flaw & Chinese phishing surge

A zero-day in a widely used Japanese learning platform let hackers plant malware, while Chinese phishing services are now bypassing one-time codes.

By Sofiah Nichole Salivio • 5 min read • Wed, 27th May 2026
Why 'strong passwords' can't save you from AI
Ransomware

Why 'strong passwords' can't save you from AI

AI has made stolen credentials and careless copy-paste habits a bigger risk than password strength, with scams and breaches accelerating.

By Raymond Schippers • 4 min read • Wed, 6th May 2026
Saiga phishing kit returns to bypass multifactor auth
Firewalls

Saiga phishing kit returns to bypass multifactor auth

Session cookie theft lets attackers slip past multifactor checks, putting enterprise email accounts at risk even after login.

By Sean Mitchell • 4 min read • Tue, 5th May 2026
OpenAI & Yubico launch phishing-resistant YubiKeys
Data Protection

OpenAI & Yubico launch phishing-resistant YubiKeys

ChatGPT users can now buy a discounted two-pack of hardware keys designed to block phishing and protect sensitive accounts.

By Mark Tarre • 4 min read • Fri, 1st May 2026
Cybersecurity experts warn of password risks as day nears
Data Protection

Cybersecurity experts warn of password risks as day nears

Rising breaches and weak credential habits are forcing businesses to adopt passkeys, multi-factor authentication and tighter access controls.

By Shannon Williams • 6 min read • Thu, 30th Apr 2026
Microsoft 365 EvilToken campaign hits hundreds daily
Multi-factor authentication

Microsoft 365 EvilToken campaign hits hundreds daily

Hundreds of Microsoft 365 users are being compromised daily as attackers bypass passwords with device code phishing and OAuth tokens.

By Shannon Williams • 4 min read • Thu, 9th Apr 2026
Yubico appoints chief marketing officer as phishing grows
Digital Transformation

Yubico appoints chief marketing officer as phishing grows

Rising AI-driven attacks are pushing firms towards phishing-resistant logins, sharpening demand for hardware-backed authentication across the sector.

By Joseph Gabriel Lagonsin • 4 min read • Tue, 31st Mar 2026

Stories from Other Regions

FIDO2 stories

Why Australian tax agents need to secure every customer login to prevent the next wave of tax fraud
Data Protection

Why Australian tax agents need to secure every customer login to prevent the next wave of tax fraud

Stolen credentials are fuelling fraud as attackers bypass ATO controls, exposing taxpayers and forcing tax agents to harden logins.

By Geoff Schomburgk • 5 min read • Last month
Why passkeys are becoming essential for modern cybersecurity
Data Protection

Why passkeys are becoming essential for modern cybersecurity

With phishing and stolen credentials driving most breaches, organisations are being urged to replace passwords with passkeys for safer logins.

By Martin Wegrostek • 4 min read • Last month
Access all areas with 1 credential: Why Australian workplaces need identity convergence now
Digital Transformation

Access all areas with 1 credential: Why Australian workplaces need identity convergence now

Rising cyber threats and hybrid work are pushing Australian employers to replace scattered badges, passwords and tokens with one credential.

By Steve Katanas • 5 min read • Last month
Millions of UK adults reuse passwords, survey warns
Multi-factor authentication

Millions of UK adults reuse passwords, survey warns

More than six million Britons may be exposing accounts to hackers by using one password across email, banking, shopping and social media.

By Sofiah Nichole Salivio • 5 min read • Fri, 8th May 2026
Experts warn passwords no longer sufficient in AI era
Ransomware

Experts warn passwords no longer sufficient in AI era

Australian firms are being urged to adopt passwordless logins as AI tools and data leakage make stolen credentials easier to exploit.

By Mark Tarre • 10 min read • Thu, 7th May 2026
Cyber security that works with humans, not against them
Data Protection

Cyber security that works with humans, not against them

As AI-fuelled social engineering rises, firms are urged to adopt phishing-resistant MFA that supports, not undermines, human behaviour.

By Michael Downs • 6 min read • Tue, 24th Mar 2026