Saturday , September 13 2025

GitHub introduces a beta preview of passkeys, making passwords unnecessary

GitHub has just announced the exciting release of public beta for passwordless authentication support. This new feature allows users, who choose to participate, to upgrade from security keys to passkeys. It’s a breakthrough in secure access management that is definitely worth exploring!

Passkeys play a crucial role in safeguarding devices such as computers, tablets, or smartphones against potential data breaches. They help prevent phishing attacks and credential theft.

Albania appoints world’s first AI minister, “Diella” to Tackle Corruption

Albania has appointed the first AI-generated government minister to help eliminate corruption. Diella, the digital assistant meaning Sun, has been...
Read More
Albania appoints world’s first AI minister, “Diella” to Tackle Corruption

L7 DDoS Botnet Hijacked 5.76M Devices for Large Attacks

On September 1, 2025, Qrator Lab identified and managed a major attack from the largest L7 DDoS botnet seen so...
Read More
L7 DDoS Botnet Hijacked 5.76M Devices for Large Attacks

Palo Alto Networks User-ID Credential Agent Vuln Exposes password In Cleartext

A new vulnerability, CVE-2025-4235, in Palo Alto Networks’ User-ID Credential Agent for Windows, could reveal a service account's password in...
Read More
Palo Alto Networks User-ID Credential Agent Vuln Exposes password In Cleartext

CyberVolk Ransomware Attacks CII In Japan, France, and UK

CyberVolk ransomware, which appeared in May 2024, has increased attacks on government agencies and critical infrastructures in Japan, France, and...
Read More
CyberVolk Ransomware Attacks CII In Japan, France, and UK

Microsoft warns of active directory and office vulnarability

Microsoft has issued a new warning about a critical security vulnerability in Active Directory Domain Services, known as CVE-2025-21293. An...
Read More
Microsoft warns of active directory and office vulnarability

(CVE-2025-10159)
Sophos Addressed Critical Auth Bypass flaw in Wireless Access Points

Sophos fixed an authentication bypass vulnerability in its AP6 Series Wireless Access Points, preventing attackers from obtaining admin privileges. The...
Read More
(CVE-2025-10159)  Sophos Addressed Critical Auth Bypass flaw in Wireless Access Points

1.6M fitness phone call recordings exposed online

Security researcher Jeremiah Fowler discovered a database containing sensitive information from gym customers and staff, including names, financial details, and...
Read More
1.6M fitness phone call recordings exposed online

Microsoft September Patch Tuesday 2025 fixes 81 flaws, two zero-days

Microsoft patched September 2025 Patch Tuesday 81 flaws, including two publicly disclosed zero-day vulnerabilities. This Patch Tuesday addresses nine critical...
Read More
Microsoft September Patch Tuesday 2025 fixes 81 flaws, two zero-days

Elastic Security Incident : Hackers Accessed Email Account Contains Valid Credentials

Elastic reported a security incident caused by a breach at Salesloft Drift, leading to unauthorized access to an internal email...
Read More
Elastic Security Incident : Hackers Accessed Email Account Contains Valid Credentials

Hacker Exploit Amazon SES to Send 50K Phishing Emails

Researchers at Wiz discovered a complex phishing campaign using Amazon's Simple Email Service (SES) for large-scale attacks, showing how hacked...
Read More
Hacker Exploit Amazon SES to Send 50K Phishing Emails

ALSO READ:

CVSS 4.0 released: The New Standard for Vulnerability Scoring

They also make it easy to access apps and online platforms using PINs or advanced biometric methods like facial recognition or fingerprints.

By eliminating the need to remember and manage unique passwords for every app and website, they also vastly improve user experience and security.

Hirsch Singhal, the Staff Product Manager at GitHub, announced the exciting news that passkeys are now accessible as a public beta. By choosing to participate in this beta version, users can enhance their security by upgrading their security keys to passkeys. Passkeys can then be used instead of relying on both passwords and 2FA methods.

To enable passkeys on your account, simply click on your profile photo located in the top-right corner of any GitHub page. From there, open the ‘Feature Preview’ menu and click the ‘Enable passkeys’ option.

Next time you sign in, we will ask if you want to upgrade your security key to a passkey. Upgrading will register it again with your passkey provider.

You may have to enter your passkey multiple times while upgrading to make sure we’re upgrading the right credential. Once you do, you’re all set for a passwordless experience.”

How to use passkeys with your GitHub account (GitHub):

​GitHub is taking another measure aimed at improving software supply chain security by moving away from simple password-based authentication.

The recent announcement marks the introduction of mandatory two-factor authentication (2FA) for all active developers on the GitHub platform, effective from March 13th.

Check Also

ISC2 Aims to Bridge DFIR Skill Gap with New Certificate

ISC2 has launched a Threat Handling Foundations Certificate to assist cybersecurity experts in enhancing Digital …