Access Control

TikTok claims it’s not collecting US users’ biometric data, despite what privacy policy says

Last year, TikTok quietly updated its privacy policy to allow the app to collect biometric data on U.S. users, including “faceprints and voiceprints” — a concerning change that the c

ConductorOne is bringing automation to identity and access management with $15M investment

The founders of ConductorOne, an identity and access control startup, both came from Okta, which is itself a single sign-on vendor based on the zero trust model. In fact, they were in charge of authen

MIT researchers uncover ‘unpatchable’ flaw in Apple M1 chips

Apple’s M1 chips have an “unpatchable” hardware vulnerability that could allow attackers to break through its last line of security defenses, MIT researchers have discovered. The vulner

Clearview AI banned from selling its facial recognition software to most US companies

A company that gained notoriety for selling access to billions of facial photos, many culled from social media without the knowledge of the individuals depicted, faces major new restrictions to its co

Apple, Google and Microsoft team up on passwordless logins

In a rare show of alliance, Apple, Google and Microsoft have joined forces to expand support for passwordless logins across mobile, desktop and browsers. Passwords are notoriously insecure, with weak

How a simple security bug became a university campus ‘master key’

When Erik Johnson couldn’t get his university’s mobile student ID app to reliably work, he sought to find a workaround. The app is fairly important, since it allows him and every other stu

The IRS won’t make you verify your identity with facial recognition after all

The IRS announced plans Monday to back away from a third-party facial recognition system that collects biometric data from U.S. taxpayers who want to log in to the agency’s online portal. The IR

iProov snaps up $70M for its facial verification technology, already in use by Homeland Security, the NHS and others

Biometrics, and specifically facial recognition, have seen a surge of usage in the last several years, first as a tool to help organizations verify identities digitally against rising waves of fraud a

Stytch, an API-first passwordless startup, raises $90M Series B at $1B valuation

Stytch, an API-first passwordless authentication startup, has secured $90 million in Series B funding, pushing the company over the $1 billion valuation line. The investment, led by Coatue Management

Yubico’s new hardware key features a fingerprint reader for passwordless logins

Yubico, the maker of hardware security keys, has unveiled the YubiKey Bio, its first key to support biometric authentication for passwordless logins and multifactor authentication (2FA) The launch of

Magic lands $27M Series A for its ‘plug and play’ passwordless tech

Magic, a San Francisco-based startup that builds “plug and play” passwordless authentication technology, has raised $27 million in Series A funding. The round, led by Northzone and with pa

Ex-Plaid employees raise $30M for Stytch, an API-first passwordless authentication platform

There are far fewer annoying things than managing one’s passwords. There are a bunch of companies out there to help you attempt to do that. And there’s also a number of companies that want to go a

Ring’s latest security updates are good, but still opt-in

Ring, the video doorbell maker dubbed the “largest civilian surveillance network the U.S. has ever seen,” is rolling out new but long overdue security and privacy features. The Amazon-own

Transmit Security raises $543M Series A to kill off the password

Transmit Security, a Boston-based startup that’s on a mission to rid the world of passwords, has raised a massive $543 million in Series A funding. The funding round, said to be the largest Seri

Europe wants to go its own way on digital identity

In its latest ambitious digital policy announcement, the European Union has proposed creating a framework for a “trusted and secure European e-ID” (aka digital identity) — which it s

Duo goes passwordless

Duo, the authentication service Cisco acquired for $2.35 billion in 2018, today announced its plans to launch a passwordless authentication service that will allow users to log in to their Duo-protect

How startups can go passwordless, thanks to zero trust

“There is no doubt that over time, people are going to rely less and less on passwords… they just don’t meet the challenge for anything you really want to secure,” said Bill Ga

Twitter now supports hardware security keys for iPhones and Android

Twitter said Wednesday that accounts protected with a hardware security key can now log in from their iPhone or Android device. The social media giant rolled out support for hardware security keys in

Spirit Airlines starts testing biometric check-ins

Discount carrier Spirit Airlines today announced that it is introducing biometric check-ins in its ticket lobby at Chicago’s O’Hare airport to streamline the check-in process and reduce fa

Google is making autofill on Chrome for mobile more secure

Google today announced a new autofill experience for Chrome on mobile that will use biometric authentication for credit card transactions, as well as an updated built-in password manager that will mak
Load More