passkeys Archives

Winsage

June 20, 2025

Windows 10 is dying as scams skyrocket. We asked a security expert for advice

In this week's episode of The Full Nerd, hosts Adam Patrick Murray, Alaina Yee, Will Smith, and guest Mike Danseglio discuss the end of Windows 10 and its security implications, the rise of scams, and various online security concerns. They explore user transitions to Windows 11, Linux, and vulnerabilities in communication methods. A recent vulnerability allows hackers to steal encryption keys from AMD Ryzen CPUs, prompting firmware updates for users of the Ryzen 3000 series or newer. Asus Armoury Crate users are advised to update due to a critical flaw that could grant hackers administrative rights. Cloud gaming is gaining traction among gamers under 40, provided latency issues are resolved. DDR4 memory prices are rising, indicating a decline of AMD’s AM4 platform. Anker has recalled older power banks due to fire hazards, and Framework has launched a new 2-in-1 DIY laptop. AMD has shared promising benchmarks for its upcoming Ryzen Threadripper 9000 series.

AppWizard

June 5, 2025

Emerging online scams are making users more vigilant, says Google

Over 60% of U.S. consumers have encountered scams, indicating a growing awareness of digital threats. More than 60% of Gen X and Baby Boomers still use traditional passwords, while younger generations prefer passkeys. Google has enhanced scam detection capabilities on Android devices, introducing features to identify potential scams in calls and texts. Over 60% of consumers perceive an increase in scams over the past year, with one-third reporting personal data breaches. Google promotes passwordless sign-in options like passkeys and "Sign in with Google" to improve security. Recent updates include enhanced scam detection in Google Messages and Chrome, and the Safety Check feature in Chrome now monitors for malicious notifications. Google has also released findings on prevalent scams, such as customer support fraud and package tracking schemes.

AppWizard

May 30, 2025

Android 16 beta testers get a look at its Advanced Protection security bastion

Google is rolling out the Advanced Protection feature for Pixel devices enrolled in the Android 16 QPR1 Beta 1 program, which includes browsing safeguards, app protections, and USB transfer restrictions. This feature aims to enhance device security and protect against online threats. The Advanced Protection Program was originally launched for users at risk of data breaches and was expanded last year to include passkeys and a simplified enrollment process. Additionally, an "Intrusion Detection" feature was noted, designed to log user activity for suspicious behavior. The Android 16 QPR1 Beta 1 update was released on May 20, 2025, and introduced a new design language called Material 3 Expressive.

AppWizard

May 28, 2025

Android Auto Just Got a Social Music Upgrade with Spotify Jam

Google is enhancing the Android Auto experience by integrating its Gemini technology and introducing new car app templates for developers. The updated Spotify app will feature "Spotify Jam," allowing passengers to contribute to the car's playlist and control audio output. Users can activate the Jam feature by pressing a button and joining via a QR code. The updated Spotify app is expected to roll out in the coming months, with Amazon Music and YouTube Music also set to adopt the new templates. Video applications will soon support an audio-only mode for listening while driving, and Quick Share will enable content sharing between smartphones and vehicles. Google plans to implement passkeys and credential manager APIs for security enhancements and will enable video and web browser apps on older Android Auto platforms.

Winsage

May 27, 2025

Microsoft Windows Warning—Do Not Install These Apps On Your PC

A recent advisory warns Microsoft users about malicious websites that install harmful applications on Windows PCs. Security researchers at DomainTools have identified a scheme where attackers create counterfeit websites resembling popular brands to trick users into downloading malware-laden applications. These applications deploy three types of malware: VenomRAT, StormKitty, and SilentTrinity, which can steal passwords and digital wallet information, and allow attackers to maintain control over compromised systems. The counterfeit sites impersonate well-known brands, including Bitdefender and various banks, highlighting the need for users to follow Microsoft's guidance on transitioning from passwords to passkeys. The attacks utilize open-source components, making them more efficient and adaptable. Users are advised to download software only from official websites, verify website addresses, and be cautious when entering credentials.

Winsage

May 25, 2025

Windows Passwords Are Under Attack — Do These 7 Things Now

Microsoft Windows is a target for cybercriminals, particularly regarding password theft. Trend Micro has reported an increase in fraudulent Captcha attacks that trick users into executing malicious commands through the Windows Run dialog, leading to data theft and malware infections. These attacks utilize PowerShell and can deploy various malware types, including Lumma Stealer and AsyncRAT. Despite efforts to disrupt the Lumma Stealer network, threats persist, exploiting legitimate platforms. Microsoft recommends users adopt safer online practices and outlines seven mitigations for organizations: disable access to the Run dialog, apply least privilege, restrict access to unapproved tools, monitor unusual behavior, harden browser configurations, enable memory protection, and invest in user education.

Tech Optimizer

May 11, 2025

Mac users once skipped antivirus software — here’s why that’s no longer a good idea

In 2024, 22 new Mac malware families emerged, up from 13 in 2022, indicating a rise in malware targeting macOS. Built-in security features include XProtect, which warns users about known malicious software; Gatekeeper, which prevents the installation of unsigned software; Sandboxing, which isolates applications to prevent unauthorized changes; Lockdown Mode, which restricts app functionality to protect user data; Safari protections against phishing and tracking; and password security measures that alert users about weak or compromised passwords. While Apple's built-in protections are robust, third-party antivirus software may provide additional security layers. Users are advised to practice good security habits, keep software updated, avoid unverified apps, and use a VPN on public Wi-Fi.

Winsage

May 3, 2025

Microsoft’s Free Upgrade Offer Hits New High—Check Your Windows PC Now

Microsoft is alerting Windows users about a significant cyber threat as many PCs will stop receiving essential security updates. A free upgrade to Windows 11 is recommended, which offers enhanced security, but 240 million users remain at risk. Microsoft encourages users with outdated PCs to transition to Windows 11, which requires a TPM 2.0 security module. As of April, Windows 11's adoption has reached 44%, while 53% of users are still on Windows 10, though this percentage is declining. The gap between Windows 11 and Windows 10 usage has narrowed to within 10%. Users unable to upgrade may face security risks and should consider safer alternatives, including transitioning to passkeys instead of passwords for their Microsoft accounts.

Winsage

May 2, 2025

Pushing passkeys forward: Microsoft’s latest updates for simpler, safer sign-ins

The tech community is celebrating the first "World Passkey Day," moving away from "World Password Day," with Microsoft and other organizations committing to the Passkey Pledge to promote passkey adoption. Microsoft has developed passkeys as a secure authentication method, replacing traditional passwords and allowing access via facial recognition, fingerprints, or PINs. Over 99% of users now prefer Windows Hello for sign-ins, and hundreds of websites support passkeys, which are resistant to phishing. Last year, there were 7,000 password attacks every second, highlighting the urgency of this transition. Microsoft has introduced passkey support for consumer applications, achieving nearly a million registrations daily, with passkey sign-ins being three times more successful and eight times faster than traditional methods. New Microsoft accounts will be created without passwords by default, and the sign-in process will prioritize passwordless methods. Currently, over 15 billion user accounts can use passkeys, with a goal to transition billions more.

Winsage

May 2, 2025

Microsoft pushes unphishable logins forward with new sign-in options

Microsoft is making passwordless logins the default method for new account sign-ins, promoting passkeys as an alternative to traditional passwords. This initiative is part of a collaboration with Google and Apple under the FIDO Alliance to enhance security and streamline the login process. New users will have passkeys set as their default sign-in method, while existing users will be prompted to switch during their next login. The shift to passkeys aims to address issues related to password management and security vulnerabilities. However, users must install the Microsoft Authenticator app to fully transition to a passwordless experience, as compatibility with other authentication apps is not supported. Without the app, users cannot completely eliminate their login passwords, which may reduce the security benefits of using passkeys.