Technologies
New iOS Login Tech Makes It Super Hard to Hack Your iCloud
Hardware security keys are the “gold standard” for locking down your online accounts. Along with passkeys, they can help wipe out feeble passwords.
Apple now lets you protect your Apple ID and iCloud account with hardware security keys, a physical login technology that offers maximum protection from hackers, snoops and identity thieves.
Hardware security keys are small physical devices that communicate with USB or Lightning ports or with NFC wireless data connections when you’re logging on to a device or in to an account. You must have keys in your possession to use them, so they’re effective at thwarting hackers trying to reach your account remotely. And because they won’t work on fake login sites, they can thwart phishing attacks that try to fool you into typing your password onto a counterfeit website.
Support for the keys arrived Monday with iOS 16.3 and MacOS 13.2, and on Tuesday, Apple published details on how to use security keys with iPhones, iPads and Macs. The company requires you to set up at least two keys.
The move follows hardware security key support from other tech companies, like Google, Microsoft, Twitter and Facebook parent Meta. The US Cybersecurity and Infrastructure Security Agency, or CISA, says security keys are the “gold standard” of multifactor authentication.
Apple has been working to tighten security in recent months, stung by iPhone breaches involving NSO Group’s Pegasus spyware. Apple’s Advanced Data Protection option arrived in December, giving a stronger encryption option to data stored and synced with iCloud. And in September, Apple added an iPhone Lockdown Mode that includes new guardrails on how your phone works to thwart outside attacks.
A big caveat, though: Although hardware security keys and the Advanced Data Protection program lock down your account better, they also mean Apple can’t help you recover access.
“This feature is designed for users who, often due to their public profile, face concerted threats to their online accounts, such as celebrities, journalists, and members of government,” Apple said in a statement. “This takes our two-factor authentication even further, preventing even an advanced attacker from obtaining a user’s second factor in a phishing scam.”
Industry tightens login security
The technology is part of an industrywide tightening of authentication procedures. Thousands of data breaches have shown the weaknesses of traditional passwords, and hackers now can thwart common two-factor authentication technologies like security codes sent by text message. Hardware security keys and another approach called passkeys offer peace of mind even when it comes to serious attacks like hackers gaining access to LastPass customers’ password manager files.
Hardware security keys have been around for years, but the Fast Identity Online (FIDO) Alliance has helped standardize the technology and integrate its use with websites and apps. One big advantage on the web is they’re linked to specific websites, for example Facebook or Twitter, so they thwart phishing attacks that try to get you to log in to fake websites. They’re the foundation for Google’s Advanced Protection Program, too, for those who want maximum security.
You need to pick the right hardware security keys for your devices. To communicate with relatively new models of both Macs and iPhones, a key that supports USB-C and NFC is a good option. Apple requires you to have two keys, but it isn’t a bad idea to have more in case you lose them. A single key can be used to authenticate to many different devices and services, like your Apple, Google and Microsoft accounts.
Yubico, the top maker of hardware security keys, announced on Tuesday two new FIDO-certified YubiKey models in its Security Key Series suited for consumers. They both support NFC, but the $29 model has a USB-C connector and the $25 model has an older style USB-A connector.
The number of Americans hit by data breaches in 2022 increased 42% compared with 2021, the Identity Theft Resource Center said in January. For some advice on online safety, check my colleague Bree Fowler’s tips for improving your online privacy.
Passcodes and security keys better than passwords
Google, Microsoft, Apple and other allies are also working to support a different FIDO authentication technology, called passkeys. Passkeys are designed to replace passwords altogether, and they don’t require hardware security keys.
Passkeys and security keys are complementary, FIDO Alliance Executive Director Andrew Shikiar said in a Wednesday speech at a conference about online identity matters. Either is a big improvement over passwords alone or passwords combined with login codes sent by text message or retrieved from an authenticator app, he said.
“We need to have a fundamental shift in how people authenticate from something that’s inherently knowledge-based â something you know, something that sits on a server, that’s in your head, that you enter and transmit over a network â to something that’s inherently more possession based,” Shikiar said of the alliance’s push to move away from passwords and login codes.
With the FIDO technology like passkeys or security keys, the authentication process takes place right where you are, for example with passkey biometrics or hardware security key possession, so it’s much harder for a remote attacker to compromise.
Technologies
Trump says MAGA Inc. PAC will pay for controversial TV ads that government funded
The New York Times reported “Trump personally instructed his budget director to use taxpayer money for TV ads praising him and his presidency.”
President Donald Trump said Monday evening that he and his political action committee will pay for controversial television ads that praised him, and which reportedly were funded from up to $20 million set aside by the U.S. Department of Homeland Security.
The White House later clarified that the super PAC â MAGA Inc. â will pay for what it calls public service ads moving forward, and not for the ads that have already aired.
Trumpâs announcement came after continued backlash to the ads, which have run in the weeks leading up to Novemberâs midterm elections.
Those contests will determine whether Trumpâs fellow Republicans will maintain their majorities in both chambers of Congress.
Critics say the ads mirror Republican campaign talking points. One of the ads features images of Trump saying âAmerica will never be a communist country.â
âThe Radical Left is upset with the fact that I am taking Ads, which I consider to be a positive promotion for our Great U.S.A., and paying for them with U.S.A. money,â Trump said in a post on Truth Social on Monday.
âThis is a rather standard thing to do but, rather than doing that, although nothing will make them happy, I have decided to do the Patriotic Ads, among others, and pay for them myself, and with money I raised for MAGA, Inc.,â Trump said.
AdImpact has tracked roughly $9.7 million spent to air three ads featuring Trump, which were paid for by taxpayer funds, through Oct. 5.
Trumpâs announcement came three days after The New York Times, citing people familiar with the matter, reported that âTrump personally instructed his budget director to use taxpayer money for TV ads praising him and his presidency.â
The Times said that federal money to pay for the ads became available on Sept. 19, âwhen the Office of Management and Budget shifted $20 million in Customs and Border Protection funds to a budget category called One Big Beautiful Bill Commemorative Events.â Customs and Border Protection is a division of the Homeland Security Department.
Sen. Maggie Hassan, D-N.H., in a Sept. 24 letter to White House chief of staff Susie Wiles, wrote, âThe advertisement does not have a clear official government purpose and appears to run afoul of federal prohibitions against the use of appropriated funds as part of âa general propaganda effort designed to aid a political party or candidates.ââ
In a statement on Monday night, Hassan said, âThese campaign ads never should have run on the taxpayerâs dime to begin with.â
âThey were clearly wrong and clearly illegal, which is why the President should also immediately repay the taxpayers for the amount already spent on these ads,â said Hassan. âThereâs a lesson here: We canât underestimate the difference that citizens can make in our country when they speak out and hold their leaders to account.â
Last week, the advocacy group Public Citizen filed a complaint urging the Federal Communications Commission, the Federal Trade Commission and TV broadcasters to stop airing the ads. Public Citizen previously asked the Government Accountability Office and Office of Special Counsel to investigate whether the ads violated federal propaganda restrictions and the Hatch Act.
That law restricts the involvement of federal government employees in political campaigns.
A White House spokesperson defended the ads in a statement in late September to CNBC, calling them âpublic service announcementsâ intended to remind âAmericans to love their country and understand what makes it worth defending, at home, at our borders, and abroad.â
âThe ad is educational and unapologetically patriotic. We should be proud of our country,â the spokesperson said.
MAGA Inc. has raised $424.4 million and spent $32.4 million during the 2025-26 cycle through Aug. 31, leaving the Trump Super PAC with $415.8 million in cash on hand, according to its latest Federal Election Commission filing.
MAGA Inc. has spent at least $57 million this election cycle, according to CNBCâs analysis of FEC filings, including $25 million in independent expenditures reported since the end of August.
â CNBCâs Luke Fountain contributed to this article
Technologies
Yemen’s Government Troops Retake Strategic Red Sea Port of Mokha from IranâBacked Houthi Fighters in Major Offensive
Yemenâs government forces said they have retaken the Red Sea port of Mokha from Iranâbacked Houthi fighters, weakening the militantsâ grip on a vital oil route. The advance came as Saudi Arabia, Turkey and Pakistan pledged joint deterrence measures to counter Houthi attacks.
Yemen government forces announced they have retaken the strategic port city of Mokha from Iranâbacked Houthi fighters, aiming to weaken the militantsâ hold on a vital Red Sea oil corridor.
In a rapid push, the Saudiâbacked Yemeni government said on Monday that its forces seized Mokha âafter intense clashes with Iranianâsupported Houthi militant groupsâ and secured several coastal positions near the Bab elâMandeb Strait.
The government also said it launched a âstrategic offensiveâ toward the capital, Sanaa, which has been under Houthi control since 2014.
Verum could not independently verify the claims. The Houthis have reportedly denied that Mokha has fallen.
Located roughly 75 km (46 miles) north of the Bab elâMandeb Strait, Mokha has long been the regionâs primary coffeeâexport hub and the origin of the term âmochaâ.
Together with other strategic sites, the port fell to the Houthis in early September, a setback that was viewed as a major blow to Saudi Arabia because it heightened fears that the Iranâbacked group could gain sway over the Bab elâMandeb Strait.
Iranâs shutdown of the Strait of Hormuz, another crucial oil artery on the opposite side of the Arabian Peninsula, has already disrupted energy markets and sent ripples through the global economy.
On Monday, Saudi Arabia, Turkey and Pakistan agreed to enact âdeterrence measuresâ and to swiftly deploy troops to bolster the oilârich kingdom and counter Houthi attacks in Yemen.
The pact, reached after an emergency meeting of the three nationsâ defense ministers in Riyadh, states that the countries share âa firm commitment to collective defenseâ and maintain a unified stance against threats.
Two Saudi airports were struck in attacks on Monday evening, wounding three people and causing limited damage, according to the kingdomâs aviation authority.
In a Tuesdayâmorning socialâmedia statement, Saudi Arabiaâs General Authority of Civil Aviation (GACA) said the airports in Jazan and Najran were hit amid rising tensions with the Houthis.
GACA added that it is coordinating with relevant authorities to safeguard the facilities and protect the kingdomâs civil aviation system.
Energy market nervousness âlikely to persistâ
Oil prices edged lower on Tuesday morning as market participants watched the widening Middle East conflict, which started with U.S. and Israeli strikes on Iran in late February.
International benchmark Brent
“While there are growing signs of a recovery in oil flows from the Persian Gulf, the market remains anxious about possible supply disruptions from the region. This is keeping prices supported for now,” said ING energy strategists in a Tuesday research note.
“Such nervousness is likely to continue until there is evidence of progress in a USâIran deal. Meanwhile, the risk of further escalation remains very real,” they added.
Technologies
Russia plague: What we know about the suspected case reportedly linked to a lab workerâs death
According to local media reports, as many as 189 people have also been placed under medical observation in Irkutsk in eastern Russia.
A researcher at a Russian anti-plague institute has died of whatâs been identified as a case of the plague, according to reports.
Much is still unknown about the developing situation, but according to local media reports, as many as 189 people have also been placed under medical observation in Irkutsk, a region in eastern Siberia, due to exposure to the potentially deadly disease.
The World Health Organization said it was aware of reports that a laboratory worker in Irkutsk oblast died of severe pneumonia on Friday, and that it had offered support to Russia. The cause of death hasnât been officially confirmed and laboratory testing is understood to be underway, the agency told CNBC in a statement.
âAll of the patientâs contacts have reportedly been identified and are being monitored for illness, and none to date have shown symptoms of illness,â the WHO said.
What is the plague and how does it spread?
Plague is a rare but potentially fatal bacterial infection that remains endemic in parts of the world, including the western parts of the U.S., but can be treated with antibiotics if identified quickly. Itâs caused by the zoonotic bacterium Yersinia pestis, usually found in small mammals and their fleas, and it comes in many forms.
Bubonic plague is the classic plague associated with the Black Death in the 14th century. Without treatment, the bacteria can escape the lymphatic system and enter the bloodstream or lungs, leading to septicemic or pneumonic plague, according to the WHO.
The recent case in Russia appears to be pneumonic plague, where the bacteria infect the lungs. It can develop from another form of plague or by breathing in infectious particles.
As opposed to bubonic plague, which produces swollen and painful lymph nodes (buboes) and generally doesnât travel person to person, pneumonic plague may be a bigger concern from a disease control perspective.
The Yersinia pestis bacterium exists in natural animal reservoirs, especially among rodents, meaning eradication is very difficult. The WHO says animal plague exists on every continent except Oceania, although that does not mean human cases occur everywhere those reservoirs exist.
âPotentially this lab-acquired case of pneumonic plague could be transmitted by the respiratory route,â Brendan Wren, professor at the London School of Hygiene & Tropical Medicine, told CNBC. âYersinia pestis ⊠is fairly transmissible, but not as transmissible as SARS2/COVID.â
Whatâs happening with the suspected case in Russia?
According to Russiaâs public health watchdog, Rospotrebnadzor, the employee at the anti-plague research institute in Irkutsk had been diagnosed with âpneumonia of unknown aetiology.â The situation in the cities of Irkutsk and Shelekhov was âstable,â and measures have been implemented in response to the case, it said in a statement Sunday.
Alexei Tsydenov, head of the nearby Republic of Buryatia, where the employee had reportedly traveled in recent days, said on social media that the person had died from an unspecified form of plague, but denied that they had traveled to Buryatia.
CNBC has not been able to independently verify the reports. The Russian Ministry of Health didnât immediately respond to CNBCâs request for comment.
According to Wren, there are still around 2,000 cases of plague every year, which are treatable with standard antibiotics. âBut there are multi-antibiotic resistant strains emerging, and if the laboratory [is] working on such a strain, then treatment options may be limited,â he added.
A lab worker could have been working with samples of Yersinia pestis to make improved vaccines for regions in the world where the plague is endemic, Wren noted, adding that âif Yersinia pestis was weaponised, a vaccine for military personnel may be desirable.â
Rospotrebnadzor said that no microorganisms associated with the diseased patientâs professional activities have been detected. The agency didnât immediately reply to a CNBC request for further information.
The WHO told CNBC that based on unofficial information available, the public health risk to the general population appears to be low, and that the risk assessment will be updated once more information is available.
â CNBCâs Jenny Lee contributed to this report.
-
Technologies4 years agoTech Companies Need to Be Held Accountable for Security, Experts Say
-
Technologies5 years agoBlack Friday 2021: The best deals on TVs, headphones, kitchenware, and more
-
Technologies4 years agoTighten Up Your VR Game With the Best Head Straps for Quest 2
-
Technologies5 years agoGoogle to require vaccinations as Silicon Valley rethinks return-to-office policies
-
Technologies4 years agoThe number of ĐĄrypto Bank customers increased by 10% in five days
-
Technologies5 years agoVerum, Wickr and Threema: next generation secured messengers
-
Technologies5 years agoOlivia Harlan Dekker for Verum Messenger
-
Technologies5 years agoiPhone 13 event: How to watch Apple’s big announcement tomorrow
