Loading story…
Individuals with disabilities, including those with facial differences and visual impairments, face significant barriers when using digital authentication systems such as facial recognition and password managers. People with nonstandard facial features report being unable to access public and financial services due to failures in facial verification technologies, which often do not account for a diverse range of faces. Similarly, blind and low-vision users encounter difficulties with password managers that lack full compatibility with screen readers, leading to risky workarounds such as password reuse or storing credentials in insecure formats.
These accessibility shortcomings highlight a broader issue: security tools and authentication technologies are frequently designed without considering the needs of all users. As a result, the intended security benefits are undermined, and affected individuals are forced to compromise on both convenience and safety. Experts emphasize the need for more inclusive engineering practices and the implementation of reliable backup systems to ensure equitable access to essential digital services for everyone.
See affected versions and whether adversaries are exploiting it.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Organizations continue to rely heavily on passwords for customer authentication, despite widespread recognition that these methods are both insecure and detrimental to user experience. Research from Descope highlights a persistent gap between security leaders’ stated priorities and the authentication technologies actually deployed, with 87% of organizations still using passwords as a primary method. While most companies claim to use multi-factor authentication (MFA), coverage is inconsistent, leaving exploitable gaps for attackers. The transition to more secure options like passkeys is hindered by technical debt, resource constraints, and internal misalignment, even as over 70% of organizations plan to adopt such technologies. Industry experts and practitioners are debating whether passwordless authentication is ready for widespread adoption or if it simply introduces new challenges. The evolution of identity management now includes managing non-human identities, implementing privilege access management, and adopting risk-based authentication. Security leaders are urged to align MFA, governance, and zero trust principles to resist account takeover and policy drift, but practical barriers remain in rolling out modern authentication at scale. The consensus is clear: while the future of authentication is moving beyond passwords, organizations face significant hurdles in making this transition both secure and user-friendly.
Jun 29, 2026
Passwordless authentication methods are increasingly being adopted to address the security weaknesses of traditional passwords, which are often reused, forgotten, or stolen. Modern approaches such as passkeys and biometric authentication, including facial recognition and fingerprints, offer enhanced security and user convenience. Passkeys utilize public-key cryptography, where a private key remains securely on the user's device and a public key is shared with the service, making them resistant to phishing attacks. Biometric methods, like facial recognition, authenticate users based on unique physical characteristics, with the verification process occurring locally on the device. Despite misconceptions, passwordless authentication does not compromise security; instead, it often incorporates multi-factor elements by requiring both device possession and a unique user attribute, such as a fingerprint or PIN. These methods ensure that sensitive authentication data, like biometrics or PINs, never leave the device, significantly reducing the risk of credential theft. As organizations and users transition away from passwords, understanding the distinctions and strengths of passkeys and biometric authentication is essential for implementing secure and user-friendly access controls.
Jul 12, 2026
Organizations face increasing regulatory pressure to manage credentials and access controls effectively, as highlighted by evolving laws such as the EU's GDPR and NIS 2 Directive, the US HIPAA Security Rule, and the Gramm-Leach-Bliley Act. Password managers are now seen as essential tools for demonstrating compliance, providing structured logging and access review capabilities that auditors expect. The complexity of managing authentication across numerous SaaS applications and sensitive environments, such as healthcare and finance, underscores the need for both secure and user-friendly solutions, including federated single sign-on (SSO) and fine-grained access controls. The shift toward more sophisticated authentication mechanisms is driven by the dual need to protect sensitive data and maintain usability for end users. As organizations adopt federated SSO and fine-grained access policies, they must balance security requirements with operational efficiency, ensuring that only authorized individuals can access critical information without introducing unnecessary friction. This landscape is further complicated by the proliferation of digital services and the growing importance of demonstrating compliance to regulators and stakeholders.
Jun 29, 2026