According to Socket, malicious payment SDK packages on npm and PyPI are harvesting developer credentials and CI/CD ...

Passkeys reduce stolen-password value, shifting ATO toward recovery, re-verification, magic links, and AI-driven identity ...

If you're using Chrome on Android, you can now sign-in to your Google account and some of the other Google services by simply using your fingerprint, instead of typing in your password every time.