Morning Overview on MSN

Hackers poisoned the PyTorch Lightning AI package and it started stealing credentials the moment you imported it

A single line of Python code was all it took. Developers who ran import lightning after installing versions 2.6.2 or 2.6.3 of ...
Morning Overview on MSN

PyTorch Lightning versions 2.6.2 and 2.6.3 were compromised on April 30 — check your installs

On April 30, 2026, someone slipped credential-stealing malware into two freshly published versions of PyTorch Lightning, one ...
The Next Web

OpenAI now lets you lock your ChatGPT account with a hardware key. Here is why it thinks you should.

OpenAI's Advanced Account Security replaces passwords with hardware keys and passkeys, disables email recovery, and opts users out of model training. Co-branded YubiKeys cost $68 for two.
IEEE

An Anonymous Authentication Scheme Based on Blind Signatures for the FIDO Protocol

Abstract: The Fast Identity Online (FIDO) authentication protocol, the latest iteration of the FIDO2 standard, aims to provide a more secure and user-friendly online authentication method. In the era ...
Biometric Companies

OpenAI joins FIDO Alliance to help AI agent authentication push

OpenAI is the newest member of the FIDO Alliance, joining the passwordless authentication group to contribute to its efforts to provide the secure and private digital identity frameworks that will be ...
Microsoft

Inside an AI‑enabled device code phishing campaign

Microsoft Defender Security Research has observed a widespread phishing campaign leveraging the device code authentication flow to compromise organizational accounts at scale. While traditional device ...
Bleeping Computer

Popular LiteLLM PyPI package backdoored to steal credentials, auth tokens

The TeamPCP hacking group continues its supply-chain rampage, now compromising the massively popular "LiteLLM" Python package on PyPI and claiming to have stolen data from hundreds of thousands of ...
Microwaves & RF

SECORA ID V2 Platform Enables FIDO Level 3+ Secured Authentication

Secured authentication to protect digital identities is available with the first FIDO CTAP2.1 Authenticator Level 3+ certifications on Infineon’s SECORA ID V2 platform. Infineon SECORA ID V2 platform ...
Redmond Magazine

Microsoft Locks Down Entra ID Authentication with Script Injection Blocking

Microsoft is tightening security around its Entra ID sign-in process by blocking external script injection, a move that could force some orgs to rethink their browser extension strategies. The update, ...