Yubico YubiKey 5.8 黑客松：开发者用新固件做 AI 代理授权与零接触密钥生成
Yubico举办YubiKey 5.8黑客松，开发者围绕新固件特性做了三个方向的项目。previewSign被用来给AI代理的高风险操作加物理确认门槛，签名对象是规范化后的请求字节而非任意payload。ARKG允许一次触摸离线派生大量不可关联的P-256公钥，适合 swarm 类场景。CTAP 2.3的原始签名能力让开发者区分了认证和授权两个层次。 
评论
点赞
收藏Leading Yubico forward: Q2 reflections and securing the AI frontier
As I reflect on Q2, I am encouraged by our steady progress with execution, the demand from the market for modern identity security expanding, and our net sales and profitability improvements. Despite ...
What the European Central Bank’s October 2026 AI cyber mandate means for bank identity security
On 7 July 2026, the European Central Bank directed Eurozone banks to have a plan in place by 31 October 2026 to address AI-enabled cyber threats capable of disrupting financial services. The mandate c...
The ‘Air-Gap Conundrum’: When Password Managers Meet the Data Center Floor
Late one afternoon, a critical legacy server dropped offline. A diligent security admin rushed to the air-gapped data center floor to fix it, but ran into a familiar barrier: clipboard redirection was...
The Defense Industrial Base Has a New #1 Cybersecurity Priority: Phishing-Resistant MFA
The Department of War’s (DoW) Chief Information Officer recently published a new resource for the Defense Industrial Base (DIB) Sector, and it’s refreshingly clear and simple. “ Brilliant at the Basic...
告别短信：微软将 Entra ID 默认认证方式过渡为通行密钥
微软宣布自 2026 年 9 月 1 日起，Microsoft Entra ID 将默认使用 Passkey（通行密钥）替代 SMS 和语音等易受钓鱼攻击的认证方式。此举旨在应对日益严重的 AI 驱动网络威胁，并与 Salesforce 等行业趋势保持一致。Yubico 作为合作方提供了具体的 YubiKey 注册步骤，建议企业提前迁移用户以增强身份安全。
YubiKey 5.8：面向身份与 AI 新时代的验证授权
Yubico 发布 YubiKey 5.8 固件，将硬件信任从身份认证扩展到数字授权。支持 FIDO CTAP 2.3 和 WebAuthn 扩展，允许使用硬件密钥签署文档审批、金融交易等数字操作。新增持久 PIN 用户访问令牌 (PPUAT) 改善用户体验，并支持最多 16 个 RPID 以适应企业多环境部署。该版本旨在为 AI 工作流提供经过验证的人类意图锚点，目前已在 YubiKey 5 系列及生物识别系列中推出。
超越登录：开发者需要了解关于 YubiKey 5.8 的三件事
Yubico 发布 YubiKey 5.8，支持 FIDO CTAP 2.3 标准。新增 WebAuthn 签名扩展，允许硬件密钥进行数字签名，适用于 AI 工作流的人机确认和去中心化身份。引入 ARKG 预览功能，通过动态生成唯一公钥防止跨会话追踪。同时优化了 PPUAT 协议，改善浏览器中凭据发现的体验，减少重复 PIN 输入。
OpenAI 强制 TAC 成员使用硬件密钥保护账户
OpenAI 宣布从 9 月 1 日起，所有 Trusted Access for Cyber (TAC) 成员必须启用硬件支持的 passkey 才能访问前沿网络模型。此举旨在防止钓鱼和社会工程学攻击，提高账户被盗用的成本。Yubico 作为合作伙伴提供定制版 YubiKeys。虽然这是 AI 安全领域的重要合规要求，但内容主要由 Yubico 发布，带有明显的产品推广性质，缺乏独立的技术深度或争议性观点。
Yubico 合作案例：利用 Appterix 将 YubiKey 物流转化为企业网络韧性
Yubico 官方合作案例，介绍 EgoMind 公司使用 Appterix 解决大规模 YubiKey 硬件部署中的设备映射、库存追踪和凭证生命周期管理问题。属于典型的厂商背书软文，缺乏独立技术洞察或深度工程细节。
Google Play Services新增NFC FIDO2安全密钥支持
Google Play Services更新支持通过NFC连接FIDO2安全密钥进行Android账号认证，覆盖Android 9及以上版本。Yubico配合实现无缝Passkey体验。此为厂商通稿性质的功能更新通知，缺乏深度技术分析或独立评测。
后量子密码成为联邦强制要求：这意味着什么以及你的机构现在该做什么
白宫发布第14409号行政令，要求联邦机构将高价值系统迁移至NIST批准的抗量子密码标准，这是首次具有约束力的联邦级强制规定。对于关注网络安全、加密技术合规及政府IT架构的技术人员而言，这标志着抗量子密码从研究走向大规模落地的关键节点，需密切关注后续NIST标准的细化及机构迁移时间表。
Salesforce enforces MFA for all employee logins: Here’s what you need to know
Salesforce is making one thing clear: traditional authentication methods are no longer enough. Beginning June 22, 2026, Salesforce is raising the security bar for employee logins by enforcing multi-fa...
Secure it Forward Spotlight: Cyber defenders as a force for resilience
Cybersecurity isn’t just about protecting systems and devices; It’s about protecting the people, organizations and communities that depend on them. Across the world, a growing network of cyber defende...
New Executive Order on AI: Identity as a critical foundation for trusted AI
On June 2, 2026, the White House issued an Executive Order on “Promoting Advanced Artificial Intelligence Innovation and Security” directing federal agencies to strengthen federal systems, coordinate ...
YubiKey 5 FIPS Series and YubiHSM 2 FIPS are now FIPS 140-3 validated: What it means for high assurance security
Editor’s Note: This blog has been updated as of June 4, 2026 to reflect YubiHSM 2 FIPS 140-3 validation With the growing threat of Generative and Agentic AI, where phishing and other sophisticated att...
Secure It Forward Spotlight: Securing independent journalism with Radio Free Europe / Radio Liberty
At Yubico, our Secure it Forward program starts from a simple idea: strong security and the ability to protect your digital identity should be accessible to the people who need it most – especially th...
The passkey spectrum: Importance of user choice in digital security journeys
This post is co-authored by Patryk Les, Principal Product Designer, UX, and Luke Walker, Director – Developer Program, at Yubico A banking customer buys a hardware security key to protect their accoun...