Versasec

04/08/2026

Passkeys are supposed to be the industry's silver bullet against . So how did a sophisticated threat group just use them to hijack 365 accounts? 👀

We can't just deploy passkeys; we have to secure how they are issued. We just published a new breakdown on exactly how this attack chain worked, and why moving away from native self-service workflows to a centralized system is the most effective way to stop it. 🔥

Check out the full article and let us know your thoughts in the comments:
https://versasec.com/blog/how-attackers-weaponized-passkeys/

hashtag

29/07/2026

We are excited to share our latest blog post: "Navigating the Post-Quantum Shift: How to Migrate 50,000 PIV Smart Cards to Hybrid Cryptography Without Breaking Your Business." 📰

In this piece, Jim Dickens, Sr. Product Manager for Authentication at Thales Cybersecurity Products, breaks down why our current PIV/smart card infrastructure is vulnerable to future hashtag attacks and how organizations can pivot to post-quantum cryptography (PQC) without disrupting daily operations. 🎙️

Read about the existential threat, the bridge strategy, and the available automated orchestration. 🚀

Are you ready to navigate the quantum shift? 🔥
Read the post:
https://versasec.com/blog/navigating-the-post-quantum-shift/

27/07/2026

The shift to passwordless authentication is no longer a question of if; it's a question of how. And the next choice your identity team will make is whether to choose FIDO2 or PKI. 🧗‍♂️

📅 Join us live on August 6: FIDO2 or PKI: A Complete Decision Framework
We are teaming up with Yubico to compare both approaches. 👏

You'll leave knowing:
- When PKI is the right choice.
- When FIDO2 is the better fit.
- When a hybrid model is your most realistic path forward.

👇 Save your seat for August 6 here: https://us06web.zoom.us/webinar/register/WN_P_Y_99FbR8uybNXhJ7n-CA #/registration

The Missing Piece of the Puzzle: Whether you ultimately choose FIDO2, PKI, or a mix of both, managing hardware keys at enterprise scale can create a logistical nightmare for your IT helpdesk.

To cut authentication-related support tickets by up to 80%, you need a Credential Management System (CMS) to automate the lifecycle of those keys.

Read our full breakdown on why your deployment needs a CMS before you roll out your new credentials: https://versasec.com/blog/why-your-yubikey-deployment-needs-a-cms/

Reasons why your YubiKey deployment needs a CMS. Exclusive features of Versasec vSEC:CMS bring top security and efficiency.

23/07/2026

Version 7.4 is live and already making waves! 🎖️

If you're an IT administrator managing hardware tokens, this release was built to tackle your biggest day-to-day headaches:

🔐 Lost a key? Our new Short-Lived Temporary Domain Passwords let you suspend the lost token and issue a secure, temporary recovery code straight to the user's Windows lock screen.

⚙️ Drowning in hybrid enrollment? Our Hybrid Environment Passkeys Management orchestrates both and credentials simultaneously from a single pane of glass.

Simplify your legacy systems and elevate your security with every use. See what's new in 7.4: https://versasec.com/blog/nist-sp-why-government-agencies-are-upgrading-to-vseccms-7-4/

Share this article

16/07/2026

FIDO2 or PKI? It’s the question on every IAM leader's mind. 🧠

The shift to passwordless authentication is no longer a question of if, but how. But choosing the right underlying technology is a critical decision that impacts your security, budget, and user experience.

Together, Michael Samara at Versasec and David Maples at Yubico, will help you navigate this transition with absolute confidence.

Date and Time: 6 Aug 2026 at 11:00 CT
Join us for a practical, expert-led session: FIDO2 or PKI: A Complete Decision Framework.

We’re comparing both approaches across:
🔒 Security & Phishing Resistance
⚙️ Deployment Complexity & TCO
👤 User Experience
📋 Compliance Readiness (with a spotlight on SLED & Utilities)
🎁 All attendees will receive a FIDO2 vs. PKI Decision Flowchart to map out their exact next steps.

Secure your spot today and build a future-proof passwordless strategy. Link to register:
https://us06web.zoom.us/webinar/register/1917836905720/WN_P_Y_99FbR8uybNXhJ7n-CA

15/07/2026

As a leader in IAM, coming together in person allows us to synchronize our vision for the future of our industry. - Yvonne Moebius. 🙏

Read about our latest trip early this year when our global team gathered in the historic heart of Riga, Latvia, for our Kickoff 2026! ✨

From diving into -quantum readiness and agility to strengthening our team bonds and exploring local culture, it was an unforgettable four days of strategic alignment and connection. 🤝

Check out the full blog post to see how we are trusting the plan, securing the future, and growing together:
https://versasec.com/blog/kickoff-2026-riga/

Or watch the video below for a behind-the-scenes look: 👇
https://youtu.be/WWrQyJIAqlE?si=CQfTZCFdhDPQtjU7

Discover how Versasec’s 2026 global team kickoff in Riga fostered strategic alignment, technical innovation in post-quantum cryptography, and operational excellence. Read about our journey to "Trust The Plan" as we scale for the future.

13/07/2026

Trying to force 100% of your enterprise onto , means sooner or later, you will hit a wall. 🖐

As we mentioned in our previous post, things like door badges, VPNs, and email signing still rely heavily on .

The reality for most organizations is a hybrid environment: we expect roughly 60% of apps to stay on PKI while 40% migrate to FIDO2.

But here is where IT and security teams get stuck: The Operational Pain. 📉
Running two distinct credential types usually means:
- 2 enrollment workflows
- 2 lifecycle policies
- 2 revocation processes
- 2 separate audit trails

You shouldn't have to double your workload to secure your environment.

The most efficient way forward is utilizing a single pane of glass. One console that handles the full lifecycle for both FIDO2 and PKI. Register, issue, renew, and most importantly, revoke everything with a single click and one unified audit trail the day someone leaves.

Do you need to figure out which apps belong on FIDO2 and which need to stay on PKI? We built a free framework to help you map your unique environment in under 20 minutes.⏱️

👇 Grab the resources below:
📊 Download the 12-app Google Doc credential map:
https://go.versasec.com/managing-fido2-pki

▶️ Watch the full step-by-step YT walkthrough: https://youtu.be/acRBTlYBfgE

09/07/2026

Attackers are actively bypassing basic through tactics like AiTM proxy attacks, social engineering, and MFA fatigue. It’s time to move beyond the basics. 😁

MFA, specifically FIDO2 and PKI, offers the hardware-backed security required to break this attack chain by cryptographically verifying the origin of login requests. However, the real challenge for enterprise IT lies in deployment and lifecycle management at scale. 🎯

Implementing a dedicated Credential Management System ( ) is essential to bridge the gap between physical tokens and identity providers. A CMS automates the credential lifecycle, from issuance to revocation, reducing administrative burden and ensuring compliance for organizations adopting modern authentication standards. 🎖️

Read the full article by John Asan here:
https://versasec.com/blog/why-enterprises-need-phishing-resistant-mfa/?utm_source=facebook&utm_medium=social&utm_campaign=jul9-beyondbasicsblog

07/07/2026

environments that authenticate with and can now with vSEC:CMS 7.4 issue certificates and passkeys using the account as a base, and connect their Azure tenant. 🎉

No more duplicate user accounts, no more vulnerable workarounds. Setting up dual-credential or has never been easier! 👏

06/07/2026

Most enterprises can't go all-in on . And they shouldn't. ⛹‍♂️

VPN, email signing, door badges run on certificates. That’s PKI, and it’s here to stay. 🤝 Cloud apps and web SSO belong on FIDO2. So the real question is which app goes where, and how to run both without doubling the workload.

🏀 3 questions to help us implement :

1. Does the app support FIDO2 or WebAuthn? If no, it stays on . 🖐

2. Does it need encryption, digital signing, or offline authentication? If yes, . FIDO2 is authentication only. It can't sign documents, and it can't work air-gapped. 🖐

3. Is it cloud or web-based with more than 100 users? If yes, move to . 👍

Around 40% of apps will probably move to FIDO2, but 60% will stay on PKI. 🤝

Then, we can face the hard part: 🏀

Two credential types mean 2 enrollment workflows, 2 lifecycle policies, 2 revocation processes, 2 audit trails. That is where the operational pain surfaces, in managing them separately.

The answer: 1 console that handles the full lifecycle of both. Register, issue, renew, revoke, from a single pane of glass. 1 audit trail, 1 place to revoke everything the day someone leaves.

Check our NEW pre-filled 12-app example, a Google Doc you can copy and use to map your own environment in 20 mins.

🗑️ Download the credential map: https://go.versasec.com/managing-fido2-pki

😁 Watch the full walkthrough on YT: https://www.youtube.com/watch?v=acRBTlYBfgE