Identity Update: Passkeys by Default, Phone Transfers, Physical Key Security

Episode notes

Summary In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss the upcoming transition to passkeys as the default method for multi-factor authentication (MFA) in Microsoft Entra ID. They explore the implications of this change, the importance of moving away from SMS and voice authentication, and best practices for organizations to prepare for this shift. The conversation also covers the challenges of transferring MFA codes and passkeys when upgrading phones, and introduces the YubiKey Locker, a new tool that enhances security by automatically locking devices when the YubiKey is removed. The hosts emphasize the need for organizations to modernize their identity infrastructure and adopt more secure authentication methods.

• Helping or Hurting? - An Honest Conversation About AI59 / 100
• Critical infrastructure hacks and rogue AI agents
• Hotel Wi-Fi Hijacks and Border Phone Searches
• MDASH in Prod, Intune Sync, OpenAI-Hugging Face Incident
• North Korean IT Worker Scam