The YubiKey 5, the most widely used hardware token for two-factor authentication based on the FIDO standard, contains a cryptographic flaw that makes the finger-sized device vulnerable to cloning when ...

NinjaLab, a security research company, has discovered a vulnerability that would allow bad actors to clone YubiKeys. As the company has explained in a security advisory, NinjaLab found a vulnerability ...

In context: The YubiKey is a hardware security key that simplifies two-factor authentication. Instead of receiving codes via text or an app, users simply tap the YubiKey when logging into accounts, ...

Security researchers have discovered a vulnerability in YubiKey 5 that would allow a dedicated and resourceful hacker to clone the device. As first spotted by Ars Technica, the vulnerability is thanks ...

Significant updates within YubiKey 5.7 firmware include increased passkey storage and expanded security, and greater flexibility with release of Yubico Authenticator 7 SANTA CLARA, Calif. & STOCKHOLM- ...

Some versions of Yubikeys, one of the most widely used two-factor authentication (2FA) hardware tools, are vulnerable to side-channel attacks. Thomas Roche, security expert and co-founder of NinjaLab, ...

Rated of moderate severity, the flaw affects YubiKey 5 series and Security Key Series with firmware earlier than version 5.7, and YubiHSM 2 versions prior to 2.4.0. And the devices are impossible to ...