Harnessing Passkeys in the Battle Against AI-Powered Cyber Threats.pptx

FIDO Seminar RSAC 2024

1. Harnessing Passkeys in the Battle Against AI-Powered Cyber Threats Bojan Simic HYPR CEO & Co-Founder

2. Hackers don’t break in. They log in.

3. Phishing Passwords and MFA Credential Stuffing Using Leaked Passwords Malware & Keyloggers Steal Credentials Social Engineering to Obtain Credentials How Hackers Are Using AI to “Log in”

4. Existing Identity Security Controls are Insufficient PUSH/OTP/SMS MFA Bypass is Automated AI is Great at Guessing Users’ Passwords Social Engineering is Easier Than Ever Endpoints Don’t Protect Credentials ‘10,000 Microsoft Customers Targeted in Phishing Attack That Bypasses Multifactor Authentication’ ‘Major Casino Chain Hacked After Tricking IT Service Desk’ ‘Hackers Are Using AI To Steal Bank Account Passwords’ ‘Password Stealing and Keylogging Malware is Being Spread Through Fake Downloads’ BREAKING NEWS

5. The (Identity) Chain is Only as Strong as Its Weakest Link User Onboarding Authentication Password and MFA Reset Endpoint Access

6. How Passkeys Make The Difference User Onboarding 2nd Interview Require usage of passkey HR Onboarding I-9 Document Verification & Verify Passkey Account Provisioning Verify passkey & gant access 1st Interview Verify user identity & create device bound passkey

7. Authentication Password & MFA Reset How Passkeys Make The Difference

8. Vulnerable to AI Enabled Phishing Kits & Social Engineering Vulnerable to AI Enabled Phishing Kits & Social Engineering Vulnerable to Social Engineering Attacks Web & Mobile Apps password SMS OTP Password + Legacy MFA App User Support Desk Web Authentication Often Relies on Phishable Authentication. AI is Great at Phishing! Access Point Primary Authentication Fallback Authentication Authentication Reset

9. Web & Mobile Apps User Passkeys Can Stop Many AI Phishing & Social Engineering in Their Tracks Passkey on Mobile Device Secondary Mobile or Security Key Multiple Factors Without Passwords Authentication is Always Phishing Resistant Credential Provisioning Protected from Social Engineering Access Point Primary Authentication Fallback Authentication Authentication Reset Synced Passkey Presence + IDV

10. How Passkeys Make The Difference Endpoint Access

11. Primary Authentication Fallback Authentication User Passkeys are bound to specific device Easy to Phish and Can Be Intercepted by Malware & Keyloggers Windows + Mac password Access Point Endpoint Access Often Falls Back to Insecure Methods Windows Hello Touch ID

12. User Windows + Mac Windows Hello Touch ID HYPR Provides Phishing Resistance and Security for Credential Lifecycle Mobile Passkey or Security Key Multiple Factors Without Passwords Authentication is Always Phishing Resistant No Credentials for Malware or Keyloggers to Intercept Access Point Primary Authentication Fallback Authentication

13. The Identity Chain is Made Strong With Passkeys! User Onboarding Authentication Password and MFA Reset Endpoint Access

14. Thank You! [email protected] @bojansimic linkedin.com/in/bojansimic