惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

F
Fortinet All Blogs
S
Secure Thoughts
月光博客
月光博客
美团技术团队
雷峰网
雷峰网
Exploit-DB.com RSS Feed
Exploit-DB.com RSS Feed
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
N
News and Events Feed by Topic
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
Forbes - Security
Forbes - Security
W
WeLiveSecurity
P
Proofpoint News Feed
阮一峰的网络日志
阮一峰的网络日志
爱范儿
爱范儿
G
GRAHAM CLULEY
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
AI
AI
Last Week in AI
Last Week in AI
Google Online Security Blog
Google Online Security Blog
Schneier on Security
Schneier on Security
云风的 BLOG
云风的 BLOG
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
Recent Announcements
Recent Announcements
Webroot Blog
Webroot Blog
T
Tor Project blog
Cisco Talos Blog
Cisco Talos Blog
N
News and Events Feed by Topic
罗磊的独立博客
The Register - Security
The Register - Security
Blog — PlanetScale
Blog — PlanetScale
T
Threat Research - Cisco Blogs
博客园 - 【当耐特】
Apple Machine Learning Research
Apple Machine Learning Research
人人都是产品经理
人人都是产品经理
T
The Exploit Database - CXSecurity.com
www.infosecurity-magazine.com
www.infosecurity-magazine.com
B
Blog
腾讯CDC
Microsoft Azure Blog
Microsoft Azure Blog
酷 壳 – CoolShell
酷 壳 – CoolShell
H
Hacker News: Front Page
Application and Cybersecurity Blog
Application and Cybersecurity Blog
Engineering at Meta
Engineering at Meta
Latest news
Latest news
IT之家
IT之家
D
DataBreaches.Net
博客园 - 司徒正美
N
Netflix TechBlog - Medium
V
V2EX
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知

Latest from TechRadar in Security

Robots are fighting wars and helping to quash riots — China is arming riot police with squads of AI controlled drones and Ukraine wants to man the frontlines with 25,000 robots US security agency still using Mythos despite ban – government using new security tool despite Pentagon's… Struggling to launch Teams? Microsoft recalls update causing failed startup and infinite loading loops –… How to meaningfully measure the effectiveness of cyber resilience 'We've identified a security incident': Vercel breach confirmed after hackers claim stolen data for sale… How EU organizations can turn sovereign cloud theory into action 'Update immediately': 60,000 WordPress websites at risk after experts discover flaw that allows hackers to… 'They mopped the floor with me and pulled every childish game they could': Disgruntled researcher releases second major Windows zero-day — claims Microsoft 'would ruin my life, and they did' 'As threats evolve, Gemini keeps our defenses one step ahead': Google claims its AI helped it block over 8.3… Cisco tells Webex users to patch critical security flaws immediately, as experts find its Wi-Fi boxes may be filling their disks with undeletable data every day Microsoft experts warn North Korean attackers target macOS users with 'a highly reliable infection chain' to steal passwords, financial data and more — here's how to stay safe Solving the shadow IT crisis in travel Agentic swarms will change how everyone uses AI – but how can organizations deploy them securely? Europol launches Operation PowerOFF — warns 75,000 DDoS users and takes down 53 domains China completes testing on ‘deep-sea electro-hydrostatic actuator’ capable of slicing undersea cables as deep as 3.5 kilometers – new compact subsea vessel testing bridges the ‘last mile’ and could deploy in 2026 Many are still leaving the door open': Security experts warn FIFA World Cup partners could be putting customers at… 'Anyone with $10 could have walked straight through': Report warns this legit-looking software is actually… An ancient Microsoft Excel security flaw could let hackers hijack your entire system, so patch now 'This is not a traditional coding error': Experts flag potentially critical security issues at the heart of Anthropic's MCP, exposes 150 million downloads and thousands of servers to complete takeover Your OpenClaw agents can empty your inbox and leak your data. Here's how to secure them Russia hits European thermal power plant in attempted ‘destructive’ cyberattack – Pro-Kremlin hackers are engaging in ‘riskier and more reckless behavior’ in latest attempt to cripple Western critical infrastructure The war in Iran is reaching cyberspace - here’s how to prepare Millions of hotel goers may have been exposed after hackers steal data and leak it on Telegram 'Every Apple user needs to know about this nasty scam': Fake warnings tell users their iCloud data will be… Dozens of WordPress plugins hijacked to target thousands of sites 'We are currently being extorted' — crypto giant Kraken says it is facing extortion attack, here's… McGraw Hill becomes latest to see its Salesforce data hacked Over 100 Chrome Web Store extensions found stealing user data from thousands of accounts OpenAI reveals its Mythos rival designed for cybersecurity pros When cyberattacks are inevitable, recovery becomes the strategy Closing the cloud complexity gap 'It's more common than you think': Experts reveal how hackers are trying to hijack your inbox with these… 'This wasn’t just phishing — it was a full-service cybercrime platform': FBI reveals takedown of notorious W3LL phishing operation targeting thousands of victims From cloud to Agentic AI: Why security must evolve faster than innovation Basic-Fit gym group data breach exposes details of over 1 million members — here's what we know ‘Authorities can ask them to hand over data’: Report claims over 80% of Europeans don’t trust US and Chinese businesses to handle their data – Europe is desperate for homegrown AI, cloud, and telecoms as the rift with the US grows Booking.com confirms reservation data breach — tells customers hackers 'may have been able to access certain… Agility is the key to protecting against Malware-as-a-Service (MaaS) Rockstar hackers publish 78.6 million stolen records — but many of us will be disappointed Adobe issues emergency security patch — Reader and Acrobat users need to update now What 2025 taught us about the importance of resilience in retail Governing the hidden risks of generative AI in the enterprise Russia launched a covert operation to deploy undersea sabotage vessels in UK waters while the world was distracted by the Middle East - UK threatens Putin with ‘serious consequences’ if subversion continues 'Industrial-scale scam operations': Global criminal organization operated slave compounds in Asia behind huge malware-as-a-service hydra targeting 35+ government agencies monthly OpenAI flags third-party data issue — all macOS users should update now Hackers use Claude and ChatGPT in 'a significant evolution in offensive capability' to breach government agencies, leak hundreds of millions of citizen records 'This is not your typical run-of-the-mill malware': CPUID download page hacked and tools replaced with links… How businesses can turn AI pilots into scalable solutions ‘No Decision’ is the new breach: Why inaction is becoming a career risk for CISOs in 2026 Rockstar confirms major third-party data breach: GTA VI maker says 'no impact on our organization or our… '$15K bill destroyed a solo developer’s startup': How hackers are using leaked Google API keys to… Adobe Reader users beware — experts flag months-old security flaw using booby-trapped PDFs to scope out victims Top WordPress Slider plugin hijacked to spread malware — here's what to look out for No, Elon Musk doesn't want to give you a $5,000 tax refund — it's a scam, here's what to look out… ‘It’s a potential national security threat’: Proton study finds over 3,500 US legislators’ official emails leaked and exposed on the dark web Microsoft warns worrying security flaw exposed over 50 million Android users, says 'user credentials and financial… Google Chrome rolls out a new tool to try and stop infostealer malware in its tracks Breach exposes sensitive LAPD files stored in city attorney system ‘FlamingChina’ hacker claims to have stolen over 10 petabytes of advanced military data from China’s National Supercomputing Center in possibly the biggest hack of all time Mac users beware — experts say this attack 'stood out immediately' by making a major change to try… Now that's different - hackers use miniature SVG images to try and hide credit card stealer Closing the implementation gap in America's cyber strategy UK NHS chief champions Palantir’s 'outstanding results’ in England, pushes for deeper rollout despite… French email provider accidentally leaked 40 million records — L’Oreal, Renault, French government data… Tame your AI gremlins before the chaos becomes permanent NHS Scotland domains reportedly found serving adult content and illegal sport streams 'This creates a layered form of obfuscation': New report says criminals are using emojis to avoid detection Top open source AI platform Flowise hit by maximum-level security issue US agencies warn Iranian hackers are targeting American critical infrastructure — causing 'disruptive effects… Third-party integration tool Anodot data breach hits Snowflake customers Always-on AI Agents put everything hackers could ever want behind a single attack surface When infrastructure decisions shape growth outcomes 'This puts organizations at risk of credential theft, data manipulation and broader compromise': UK government, Microsoft warn Russian hackers are hitting TP-Link home routers to hijack internet traffic 'A new frontier model trained by Anthropic that we believe could reshape cybersecurity': Project Glasswing wants to use AI to prevent AI cyberattacks — but will 'overeager' Claude Mythos do more damage than help? Microsoft flags China-based hackers using vicious new 'rapid attack' zero-days to launch ransomware at targets… 'By combining trusted platforms with legitimate tools, the threat actor reduces visibility and increases the… 'Stolen session cookies render MFA irrelevant': How $900-per-month turnkey malware is putting enterprise-grade… 'Verify before you act': security expert reveals the simple steps you can take to stay safe from deepfakes I can't think of anything that's off limits to them': FBI slams cybercriminals for attacking schools,… 'I was not bluffing Microsoft, and I'm doing it again': apparently disgruntled researcher leaks worrying… Understanding the ‘espionage ecosystem’ threat Goodnight REvil and GandCrab? Police think they've identified two of the biggest cybercrime bosses around Why modern cyber conflict is partly a global skills challenge 'Your login credentials may already be slipping into the hands of a cybercriminal': Hackers target LinkedIn… SparkCat malware returns to target Android and iOS users, hiding in innocent apps to try and steal your details One of the largest corporate espionage and data breach scandals in digital history': New "BrowserGate" report claims LinkedIn secretly scans user browsers for installed extensions and collects device data This devious VENOM phishing campaign targets business executives by name — so watch what you click on Backups won’t save you from this version of ransomware Your marketing stack is an attack surface – is security watching? AI agents can only be trusted as Junior Engineers Top museums hit by apparent cyberattack on Vivaticket — Louvre and other institutions affected Uffizi galleries confirms it was hit by cyberattack — but claims nothing was stolen Time for an upgrade? Report warns outdated operating systems could be the 'unnecessary risk' your business… Building private AI: control, compliance and competitive edge 'Skipping a beat on resilience investment isn’t an option any more': IT incidents can cost firms huge amounts - here's how to stay on top of issues 'The most powerful weapon is not always a missile': How Iranian "Charming Kitten" hackers used old… 'Growing 3x faster than police staffing': Surge in cybercrime and new laws on ransomware payment could put UK… The invisible threat hidden in clear view: how Unicode characters are being weaponized to hide malicious commands from… Be careful what you click - hackers use Claude Code leak to push malware Hims and Hers reveal cyberattack — customer support system hacked and personal info stolen, here's what we…
OpenAI is making ChatGPT accounts much more secure – including some literal physical security keys
Craig Hale · 2026-05-04 · via Latest from TechRadar in Security
OpenAI Advanced Account Security
(Image credit: OpenAI)

  • Yubico launches two-pack of Yubikeys to protect your ChatGPT account
  • One plugs in to your PC via USB-C, the other authenticates your smartphone via NFC
  • OpenAI has been using them internally to protect company workers' accounts

OpenAI has announced an important new partnership with Yubico to help protect ChatGPT users from potential break-ins with the launch of custom YubiKeys.

As part of OpenAI's Advanced Account Security program, users can buy a two-key bundle to protect their accounts by requiring both keys to be present before they can log in.

For PC users, the YubiKey C Nano stays plugged into laptops and desktops to verify the user's presence, while a separate YubiKey C NFC can be tapped against a smartphone to verify the login on mobile devices.

You can now protect your ChatGPT account with a physical YubiKey

"A physical security key adds an extra layer of defense and helps protect your account even if your password is exposed," OpenAI summarized, noting that users can use any FIDO-compliant security key.

By using hardware-backed passkeys, users get access to what's deemed the 'gold standard' for authentication that's resistant to phishing attacks. While a physical key may be required, it does mean that users can get away with a passwordless login for easier and quicker access.

"Ultimately, our intent is to drastically reduce the threat of unauthorised access to sensitive data in OpenAI accounts worldwide," Yubico CEO Jerrod Chong wrote.

OpenAI CISO Dane Stuckey noted that the company has already been using Yubico physical keys internally to protect workers' accounts: "We’ve made YubiKeys a standard part of how we protect OpenAI employees, and with Advanced Account Security, we’re making it easier for ChatGPT users to choose that same kind of phishing-resistant protection when it’s right for them."

Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!

The ChatGPT maker did stress that physical keys prioritize security above all else, thus recovery options become more limited in the event of a lockout.

Yubico says it's launched the two-pack with exclusive pricing for existing OpenAI account holders – the pack costs $68.


Google logo on a black background next to text reading 'Click to follow TechRadar'

Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.

With several years’ experience freelancing in tech and automotive circles, Craig’s specific interests lie in technology that is designed to better our lives, including AI and ML, productivity aids, and smart fitness. He is also passionate about cars and the decarbonisation of personal transportation. As an avid bargain-hunter, you can be sure that any deal Craig finds is top value!