Artificial intelligence is in-position to do some very non-artificial damage as threat actors really look to harness it in 2026 in order to inflict unprecedented financial and reputational damage (not to mention identity theft). I gathered expert opinions from some of the best threat intelligence and #cybersecurity pros on the planet to find out how these #AI attacks and will happen and published my findings on @ZDNET zdnet.com/article/10-ways-ai…

According to @levie, the ratio of AI agents to humans will be 1000:1. If that's so, we'll need a new way to track how those agents are permissioned to access an organization's systems of record. As I explain on @ZDNET, @okta has proposed an extension to the #Oauth standard to make that possible. zdnet.com/article/okta-impro…

For an article that I'd like to write on @ZDNET, I'm looking for users of @evernote to discuss recent pricing changes.

A chicken-and-egg paradox: If you need to be logged in to your password manager so that you can login to everything else without a password, then how is a passwordless login to your password manager possible without the help of that same password manager? Answer? It's not... unless.... (my latest on @ZDNET) zdnet.com/article/dashlane-d…

Starting today, @Microsoft's Authenticator no longer supports passwords. But all the coverage of this change claims that Authenticator still manages #Passkeys. As it turns out, that's only in certain edge cases. Here's the scoop: zdnet.com/article/microsoft-…

With polymorphic extensions, @getsquarex has exposed how the permissions process for browser extensions is pretty much useless. @Google (who didn't respond to my inquiries) needs to start over with how such permissions are granted and managed zdnet.com/article/your-passw…

Today is #WorldPasswordDay. I wrote up my top 10 current tips for working with #passkeys right now (even though the passkey ecosystem isn't 100% ready for primetime) Props to @ZDNET's @jasonhiner for pushing me to write it and to @dgrober for a great edit zdnet.com/article/10-passkey…

While I appreciate this author's enthusiasm for #passkeys, he & @Forbes are misinforming you in saying that passkeys are a form of account authentication linked to the security hardware on your device. Yes, they *can* be. But in most cases, they won't be forbes.com/sites/zakdoffman/…

The big idea behind #passkeys is to get rid of passwords. That idea alone is scary to a lot of people. A lot of education is going to be necessary. If we screw the story up, it will only delay adoption. This @ZDNET article gives an example #security zdnet.com/article/if-we-want…

There are many posts on the web about how #Passkeys are a failure. Yes, the road to passkeys (and maybe a #passwordless future) is littered with potholes. But, in this @ZDNET article, I'm "glass half-full" for now zdnet.com/article/why-the-ro…

I never considered the intersection of #Agentic #AI , credential managment (aka "password management"), and #APIs until I reported on this @1Password news for @ZDNET zdnet.com/article/1password-…

Microsoft has disqualified many Windows 10 PCs from being upgraded to Windows 11. Microsoft is also discontinuing support for Windows 10 this October. @edbott8 has the workaround on @ZDNET zdnet.com/article/how-to-upg…

I've returned to @ZDNET to do some writing and here's my first contribution. HINT: According to the lawyers, if you plan to travel throuugh a US point-of-entry, you might want to disable your #biometrics. zdnet.com/article/worried-ab…

Breach of LastPass allegedly led to compromises of #crypto wallets (and subsequent theft of tokens) 🥲 paymentsecurity.io/crypto-ro…

I'm giving away free merch (including a beautiful new commemorative cycling jersey) to the BEST partners! Let's GO!! Bit.ly/StopMS #StopMultipleSclerosis

When I first interviewed @Deloitte's @michaelvbondar in '23 and he referred to #blockchain as a general purpose trust machine, I walked away thinking "Wait! What?!!!" Disintermediating untrustworthy banks with a new set of financial "rails" (aka #crypto) is what comes to everyone's minds. But Bondar was referring to many other businesses where trust is not only lacking, but further eroding. The epiphany came when I read that @salesforce CEO @Benioff once implied that you're mistaken if you think his company's main solution is #CRM when he said (paraphrasing) "the thing we really sell is trust." For any organization and any application, blockchain is the shortest path to restoring and "selling" trust. deloitte.wsj.com/cfo/rebuild…

This quote about #blockchain from the linked (below) @API3DAO paper (the #dAPI guys) is one of the better ones. Not "great" IMHO, because it leaves out some important benefits of #decentralization (and elimination of trusted parties is a terrible icebreaker). But "censorship" really caught my eye as a highly overlooked #Web3 topic: "Decentralization defines Web 3.0, which is characterized by distributing computation and settling outcomes through predetermined consensus rules. The business logic of a decentralized application is implemented as a smart contract, which runs on a blockchain-based smart contract platform. Decentralization allows participants to cooperate without requiring mutual trust or a trusted third-party, and thus provides robustness against attacks and censorship." Here's the paper: drive.google.com/file/d/1b8Q…