The US National Institute of Standards and Technology's 2025 digital identity guidelines classify authentication over public telephone networks as restricted. Passkeys keep private keys in a device or credential manager and bind them to a service, but recovery varies by provider.
The US Cybersecurity and Infrastructure Security Agency added CVE-2026-65400 to its known-exploited catalog on August 18, 2026. Apple had fixed the Screen Sharing authentication flaw in three macOS branches on August 6, while the Netherlands NCSC later reported abuse against internet-exposed systems.
The US Food and Drug Administration replaced its medical-device cybersecurity guidance in February 2026, updating recommendations tied to statutory duties that took effect in 2023. Taiwan's regulator publishes a 2021 lifecycle guide and five reference templates, but the cited public material does not establish a US-style statutory submission rule.
INTERPOL and the United Nations Office on Drugs and Crime warned on March 17, 2026, that generative AI was making trusted-person impersonation easier. A familiar voice or face can now support a false request, so money and data should move only after a separate identity check.
The FIDO Alliance estimated in May 2026 that five billion passkeys were in use worldwide as more services offered passwordless sign-in. Passkeys block reusable secrets from reaching phishing sites, but users must plan for device loss and cross-platform access.
Coinkite warned on July 30, 2026, that seeds created by several Coldcard models on affected firmware may be exposed because seed generation used a general-purpose pseudorandom generator. A build integration error silently routed the process away from the hardware random-number generator without stopping the firmware build.
LayerX reported on June 29, 2026, that six agentic browsers and browser plugins copied test SSH credentials after a rigged online game changed the rules they followed. The proof of concept shows how untrusted web content can reach authenticated resources when an agent is allowed to browse and act with a user's access.
Taiwan completed government trials of three zero-trust controls between 2022 and 2024, while 47 top-tier agencies received help deploying identity checks. Financial regulators are taking a phased approach that starts with guidance and may later put implementation principles into baseline rules.
