“Traditional” means of multi-factor authentication (such as OTPs) simply aren’t fit-for-purpose to protect against these attacks, which can financially cripple a company or organization. It is important that all businesses take steps to educate and protect their employees and customers from such threats.

The latest prominent attack, which was carried out on Colonial Pipeline, used a single stolen password to essentially cripple the U.S eastern seaboard. It’s difficult to name a breach from the past five years that wasn’t tied to stolen credentials. This is a clear and present threat to our economy, our national security and our society.

Hundreds of millions of personal records are being stolen and resold on the dark web on an alarmingly regular basis. Threats and attackers are growing in sophistication, and the impacts are non-trivial. As more businesses move to the cloud, it is absolutely critical that cloud service providers follow suit to protect this critical infrastructure. Not only will this protect the burgeoning number of businesses that run on AWS, but it will help instill better authentication practices as these keys can be used across many other business (e.g., G Suite, Github, Dropbox, Stripe) and consumer (Facebook, Twitter, Coinbase, Bank of America) services.Īmazon has been a leading stakeholder in FIDO Alliance for several years now – it is wonderful to see their leadership extended to the market at large. Leaders from Amazon, Apple, Google, Microsoft and IBM met with President Joe Biden at the White House last week to discuss strategies the government and private sector can use together to improve the nation’s cybersecurity.įollowing the meeting, Amazon announced that it will provide eligible AWS customers with access to free FIDO Security Keys. By Andrew Shikiar, Executive Director & CMO, FIDO Alliance

Fido u2f security key amazon