HI! I'm Elliot Alexander, a London-based Computer Scientist with a background in software engineering. I've worked across the security and high-performance computing space, and am experienced in all ...

NinjaLab, a security research company, has discovered a vulnerability that would allow bad actors to clone YubiKeys. As the company has explained in a security advisory, NinjaLab found a vulnerability ...

A new "EUCLEAK" flaw found in FIDO devices using the Infineon SLE78 security microcontroller, like Yubico's YubiKey 5 Series, allows attackers to extract Elliptic Curve Digital Signature Algorithm ...

I've now spent a significant amount of effort exploring the ways to use yubikeys that extend beyond the basic web authentication. These are incredibly capable devices but you have to know what you're ...

Two-factor authentication is supposed to be the number one way to keep hackers out of your sensitive accounts, but now that ...

YubiKey 5.8, released July 21, adds hardware-backed per-action authorization for AI agent workflows via CTAP 2.3 and a WebAuthn signing extension preview — letting organizations require a physical key ...