Microsoft

OAuth redirection abuse enables phishing and malware delivery

OAuth redirection is being repurposed as a phishing delivery path. Trusted authentication flows are weaponized to move users ...
Microsoft

Inside Tycoon2FA: How a leading AiTM phishing kit operated at scale

Tycoon2FA has become a leading phishing-as-a-service (PhaaS) platforms, enabling campaigns that reach over 500,000 organizations monthly, prompting Microsoft’s Digital Crimes Unit (DCU) to work with ...
The Straits Times

Private organisations still using NRIC numbers for authentication may face sanctions from 2027

SINGAPORE - Private organisations that have not phased out the use of NRIC numbers for authentication will risk breaching the Personal Data Protection Act (PDPA) from Jan 1, 2027. In a statement on ...
Channel NewsAsia Singapore

Can private organisations still use NRIC numbers for authentication? Here's what you need to know

SINGAPORE: Private organisations have until the end of 2026 to phase out the use of NRIC numbers for authentication, the Personal Data Protection Commission (PDPC) announced on Monday (Feb 2).
The New York Times

Students Are Skipping the Hardest Part of Growing Up

Mr. Shirky, a vice provost at New York University, has been helping faculty members and students adapt to digital tools since 2015. Back in 2023, when ChatGPT was still new, a professor friend had a ...
PC Magazine

Still Using Passwords? That's Risky. Here's Why You Should Switch to Passkeys Now

Passkeys provide stronger security than traditional passwords and could eventually replace them entirely as adoption grows. We explain everything you need to know and show you how to get started. I ...