Cyber Security News

“Password Era is Ending,” Microsoft to Delete 1 Billion Passwords

Microsoft has announced that it is currently blocking an astounding 7,000 password attacks every second, nearly double the rate from just a year ago.

This surge in cyber threats underscores the urgent need for more robust authentication methods, with passkeys emerging as a promising solution.

The tech giant has also reported a 146% year-over-year increase in adversary-in-the-middle phishing attacks, highlighting the evolving sophistication of cybercriminals.

These alarming statistics come as part of Microsoft’s broader efforts to transition away from traditional passwords towards more secure authentication methods.

Passkeys, a cutting-edge alternative to passwords, are gaining traction as a potential game-changer in the fight against cyber attacks.

2024 MITRE ATT&CK Evaluation Results for SMEs & MSPs -> Download Free Guide

Unlike passwords, passkeys leverage biometric data or PINs to unlock a private key stored on the user’s device, making them significantly more resistant to phishing and other common attack vectors.

Microsoft’s commitment to passkeys is evident in its recent initiatives. In May 2024, the company announced passkey support for popular services like Xbox, Microsoft 365, and Microsoft Copilot.

The results have been encouraging, with passkey sign-ins proving to be three times faster than traditional passwords and eight times faster than passwords combined with multifactor authentication.

User adoption has also been promising. Microsoft reports that users are three times more successful in signing in with passkeys compared to passwords, with a 98% success rate versus 32% for passwords.

Furthermore, 99% of users who begin the passkey registration process complete it, indicating high user acceptance.

To drive adoption, Microsoft has implemented a proactive approach, nudging users to enroll in passkeys at key moments, such as account creation or password resets.

This strategy has yielded impressive results, with a 987% increase in passkey use following the implementation of a new sign-in design.

Looking ahead, Microsoft projects that hundreds of millions of new users will create and use passkeys in the coming months.

The company’s ultimate goal is to completely eliminate passwords, transitioning to accounts that only support phishing-resistant credentials.

As the digital landscape continues to evolve, the shift towards passkeys represents a significant step in enhancing cybersecurity.

With major tech players like Microsoft leading the charge, the era of traditional passwords may indeed be coming to an end, ushering in a new age of more secure and user-friendly authentication methods.

Investigate Real-World Malicious Links, Malware & Phishing Attacks With ANY.RUN – Try for Free

Gurubaran

Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago