A new survey from Yubico and Okta found that 43% of cybersecurity and IT professionals still rely on passwords at work even though most know passkeys are more secure. The annual 2026 Global State of Authentication report, conducted by Talker Research, surveyed nearly 2,000 cybersecurity and IT professionals across nine countries, and found that 52% inherited passwords on their first day, establishing legacy onboarding defaults that dictate long-term security habits. The survey also found that 44% suffered an AI-driven attack in the last 12 months, with Singapore experiencing the highest rate globally at 58%, compared with Japan at 30% and Germany at 38%, while 39% of security professionals failed to distinguish AI-generated text from human writing. India at 68%, Australia at 60%, and the U.S. at 56% showed the highest proportion of workers very familiar with passkeys, yet 50% of U.S. security pros still use passwords at work, leading all surveyed markets in legacy password dependency. Yubico and Okta said they are partnering to streamline how enterprise identity systems issue, manage, and enforce hardware-backed credentials, embedding phishing resistance into modern access management platforms to help IT teams eliminate password dependencies without adding operational friction.
Okta is partnering with Yubico to streamline enterprise issuance and enforcement of hardware-backed phishing-resistant credentials, expanding its identity platform offering.
Yubico co-authored the report and is partnering with Okta to embed hardware-backed phishing-resistant credentials into enterprise access management.
Talker Researchi
Private± Mixedrelevance
Related news
United States
SailPoint Raises Fiscal 2027 ARR Outlook After Q2 Earnings Beat
SailPoint reported fiscal second-quarter 2027 adjusted earnings of 9 cents per share, up 28.6% year over year and 12.5% above the Zacks Consensus Estimate of 8 cents, and raised its full-year ARR outlook. Revenues rose 16.8% year over year to $309 million but missed the consensus mark by 0.51%, while annual recurring revenue increased 25% to $1.231 billion and SaaS ARR climbed 36% to $847 million. AI-driven ARR exceeded $70 million, and the AI-driven pipeline more than doubled since the June 2026 Investor Day to more than $200 million. For fiscal 2027, the company raised its ARR outlook to $1.375-$1.385 billion from $1.364-$1.374 billion, with revenues still forecast at $1.265-$1.275 billion and adjusted earnings at 30-34 cents per share. For the fiscal third quarter, SailPoint expects ARR of $1.288-$1.292 billion, revenues of $326 million to $330 million, and adjusted earnings of 7-8 cents per share.
CyberFOX Acquires Optimize365 to Add Microsoft 365 Security
CyberFOX has acquired Optimize365, adding continuous Microsoft 365 tenant monitoring and hardening to its existing portfolio of privileged access management, password management, AI-powered DNS filtering, and Zero Trust Network Access. The acquisition extends CyberFOX's coverage from endpoints, privileged access, credentials, and web traffic into the Microsoft 365 environment, letting IT teams continuously identify configuration drift, prioritize high-risk changes, and automate remediation. Optimize365 will continue to operate under its own brand within the CyberFOX portfolio in the near term, with no disruption to service, support, or contracts for existing partners and customers, and CyberFOX plans to integrate it into its partner program and product roadmap over the coming quarters. The deal follows CyberFOX's nine-figure growth investment led by Level Equity and Radian Capital in February 2026 and its acquisition of SASE provider Timus Networks in June 2026. CEO David Bellini said the goal is to protect the full access attack surface without adding more complexity, while Chief Revenue Officer Adam Slutskin called the move a natural extension of the company's mission to serve lean IT teams.
Okta Unveils New AI-Agent Security Capabilities at Oktane 2026
Okta Inc. unveiled additional AI-agent security capabilities at Oktane 2026, building on its Agent SSO product that became generally available in August, as the company positions itself as a critical identity control layer for enterprise AI agents. The company delivered 10.60% year-over-year topline growth in the second quarter of fiscal 2027, bringing trailing twelve-month revenue to $3.07 billion, with $987 million in trailing operating cash flow and approximately $961 million in trailing twelve-month free cash flow. Okta shares have returned 144.58% year-to-date and were trading at $211.49 at the close on October 2, extending 52-week gains to 125.69%, against a 14.58% rise for the broader S&P 500 over the same period. The stock carries a market capitalization of $35.90 billion and a trailing P/E of 123.71x, while its roughly 54x forward multiple reflects adjusted earnings expectations rather than the GAAP basis of the trailing figure. Institutional interest has grown, with 58 hedge funds holding positions as of second-quarter 2026 13F filings, up from 49 at the end of the first quarter, and BlackRock the largest institutional investor at 18.7 million shares, or 11.19% of outstanding shares.
Tiny Completes $1.9 Million Acquisition of Oso Cloud
Tiny Ltd. has completed its acquisition of the assets comprising Oso Cloud, an enterprise software business specializing in authorization and access control, for approximately $1.9 million in cash consideration. The deal closed on October 1, 2026, and was funded with Tiny's balance sheet cash, comprising approximately $1.2 million paid at closing and an aggregate holdback of approximately $0.7 million for transition services and transaction adjustments. Founded in 2019, Oso Cloud had approximately $5.3 million in annualized recurring revenue at closing and served approximately 80 customers in security, fintech and developer software on recurring subscription contracts, including several multi-year agreements. Including Oso Cloud, Tiny's pro forma annualized recurring revenue would rise approximately 7.6 percent, from $70.0 million to approximately $75.4 million. Chief Executive Officer Austin Singhera said controlling access to sensitive data and critical systems is fundamental to how large enterprises operate securely, especially as new applications and AI tools reshape how work gets done.
Proof Appoints Jeremiah Glodoveza as Chief Marketing Officer
Proof, the identity authorization network, announced the appointment of Jeremiah Glodoveza as Chief Marketing Officer, tasking him with leading the company's global marketing, brand, and communications. Glodoveza joins from Nuvei, where as Senior Vice President, Head of Global Branding and Communications he led communications for its $2.75 billion acquisition of Payoneer and completed a company-wide rebrand. He previously built the global brand and demand engine at cross-border payments firm Nium and, at Early Warning Services, was a founding team member who helped launch Zelle. Proof, founded as Notarize, pioneered remote online notarization and drove its enactment into law across 47 U.S. states; its platform is now connected with Visa's global network and in commercial deployment with multiple Tier-1 U.S. banks. In recent months Proof launched x401, an open, issuer-neutral protocol for verifying the human authority behind AI agent actions, joined the FIDO Alliance, and launched a portable digital identity for banks after FinCEN and federal banking agencies recognized verifiable credentials under customer identification program rules.
Cybersecurity & Digital Trust › Identity & Access Management Talent
Cybersecurity & Digital Trust › Workforce & Customer IAM (SSO/MFA) Talent
Proof (formerly Notarize) · Capital · Positive Proof appoints Jeremiah Glodoveza as Chief Marketing Officer to lead global marketing, brand, and communications.
Socure Adds Mobile Driver's License Verification via Google and Samsung Wallets
Socure has launched U.S. mobile driver's license verification within DocV, its identity verification product, allowing organizations to cryptographically verify mDLs against the issuing state authority when presented from Google Wallet and Samsung Wallet during remote onboarding and step-up flows. The launch follows a September 8, 2026 joint FAQ from FinCEN, the Federal Reserve Board, the FDIC, the OCC and the NCUA confirming that an unexpired, government-issued verifiable digital credential can qualify as documentary evidence under the Customer Identification Program Rule, provided the institution has the technology to extract the required information and still forms a reasonable belief of the customer's true identity. ABI Research projects the U.S. mDL install base will grow from 21.7 million in 2025 to 143 million by 2030, with 40 states issuing digital licenses; today 21 states issue mDLs conforming to the ISO/IEC 18013-5 standard, more than 8 million credentials are active, and roughly 45% of Americans live where one is available. Socure said mDL verification complements its physical document capture rather than replacing it, and that its DocV now supports remote presentation under Part 7 of the ISO standard from Google Wallet and Samsung Wallet, addressing the higher-risk remote verifications that have been supported unevenly across wallets. The announcement comes alongside an extension of Socure's partnership with Xcelerate Solutions to support public sector use cases under the Login.gov Next Generation Identity Proofing Blanket Purchase Agreement, operating within Socure's FedRAMP Moderate environment.
Socure · Demand · Positive Socure extended its partnership with Xcelerate Solutions for public sector use under the Login.gov Next Generation Identity Proofing BPA.
Xcelerate Solutions · Demand · Positive Xcelerate Solutions extended its partnership with Socure to support public sector identity proofing use cases under the Login.gov BPA.
005930.KO · Technology · Positive Socure's DocV now supports remote mDL presentation from Samsung Wallet, expanding the utility of Samsung's digital wallet credential.
GOOG · Technology · Positive Socure's DocV now supports remote mDL presentation from Google Wallet, expanding the utility of Google's digital wallet credential.