The vulnerability would require an outsider to already have obtained a victim's username and password.

DHS wants agencies to clamp down on login credentials after a hacking campaign emanating from Iran.

The phishing methods are not new, but point to an effort to automate them at scale to target human rights activists, journalists and others.

A new report from password management company LogMeIn found that the bigger the enterprise, the bigger the problem when it comes to managing passwords.

All four devices in the fifth line of YubiKeys support FIDO2, an open authentication protocol that allows users to forgo passwords entirely.

The bipartisan group is particularly focused on the department's lack of multi-factor authentication.