Phishing attacks have become par for the course when it comes to cybersecurity threats, partly because they’re so effective—and some attackers are taking advantage of advances in voice-based technology to increase their chances for successful subterfuge.

Michael Crandell, CEO of password manager Bitwarden, demonstrated just how far voice phishing, or “vishing,” has come. During an interview with IT Brew, Crandell played a recording his team had made of him apologizing to this reporter for his lateness and asking for personal information to reconnect. While the delivery was somewhat stilted, the effect wasn’t completely unbelievable.

“Almost every new team member at Bitwarden in the first week or two gets a text, supposedly from Michael Crandell, asking them: ‘I’m in a webinar, could they buy some gift cards?’” Crandell said. “Most of them are pretty obvious, but I think we’re in a world where, because of AI, everything is advancing quickly and becoming more difficult to detect.”

So, who’s really on the line?—EH

Not to ruin the party like it’s 1999, but there’s a looming Y2K-like technology threat that IT pros need to prepare for before it’s too late: quantum computing.

The promise of quantum computing and its problem-solving prowess also poses a glaring threat to old encryption methods like the RSA algorithm.

With sensitive data potentially unlocked to adversaries, tech pros who spoke with IT Brew advised practitioners to reopen the Y2K playbook and apply familiar preventative steps from that memorable turn of the century: take inventory, apply updates, and test. Quantum preparations, security specialists told IT Brew, include working through a checklist of tool inventory, vendor conversation, and a changeout from old encryption to new.

What is quantum? Instead of using bits, quantum computers deploy particle-manipulating qubits to quickly store and process data on refrigerated hardware running at temperatures approaching absolute zero. Some possibilities for the high-speed calculators include better sensors and improved simulations for batteries and material science.

How to prep yourself before you wreck yourself.—BH

Do you know you have 30 minutes? 30, 30, 30, yes.

Users who depend on autofill to store their passwords in the Microsoft Authenticator app should get ready to say their goodbyes as the beloved feature counts its days.

Wait, what? For those out of the loop, Microsoft said earlier this year it would discontinue autofill in Microsoft Authenticator in July in a bid to consolidate its credential management features in Microsoft Edge, the company’s AI-powered browser. The suspension is set to occur in three phrases:

• Starting this month, Microsoft said users will be unable to add or import new passwords in the Microsoft Authenticator app. It noted that users could continue to save passwords in autofull until the next phase in its transition.
• In July, autofill will be discontinued in Microsoft Authenticator.
• By August, saved passwords will no longer be accessible in Microsoft Authenticator.

Well, what now? To all the hardcore autofill fans out there, all is not lost. Microsoft said the functionality will continue to be accessible through Edge. Users can also use alternative password managers, such as Google Password Manager or iCloud Keychain, by setting them as their default autofill provider in their phone settings.

Why Microsoft is pushing passkeys.—BM

Windows Vista was supposed to be Microsoft’s next leap forward—instead, it became a cautionary tale in overpromise and underdeliver. From vaporware features to hardware headaches, discover how one of tech’s biggest flops almost derailed an empire.