A new Pentagon memo outlines approved non-CAC authentication tools and sets boundaries for accessing DOW systems without PKI.

The memo does not include any requirements for authenticators to be phishing-resistant, even though DoD is required to retire phishable authenticators by 2027.

As much as our digital ecosystem has advanced in recent years, some elements of the security world have been slower to change. For example, a shortage of well-trained cybersecurity professionals has ...