Yubico reported 12% organic net sales growth in Q2 2026, with a gross profit margin of 80% at the higher end of guidance. The Swedish security key maker posted an EBIT of SEK 79 million with a 14.4% margin, up 12 percentage points year-over-year. Small and mid-size bookings grew 18%, whilst perpetual bookings increased 7%, primarily from deals below SEK 3 million. YubiKey as a Service now represents 24% of total bookings. However, order bookings declined 5% organically, impacted by a lack of large multi-year deals. Currency fluctuations negatively affected EBIT by SEK 10 million. The company also underwent a reduction in force as part of cost-saving measures. Yubico maintained strong customer retention with a 98% gross retention rate and 107% net retention rate. The company held a cash position of SEK 1.02 billion.

The 'air-gap conundrum': when password managers meet the data center floor. Jonathan Hanlon August 3, 2026 Late one afternoon, a critical legacy server dropped offline. A diligent security admin rushed to the air-gapped data center floor to fix it, but ran into a familiar barrier: clipboard redirection was disabled by policy. Forced to manually transcribe a complex, 30-character randomized password on a rack keyboard, a single slipped finger triggered an immediate account lockout - snowballing a routine five-minute fix into a high-stress, multi-hour P0 incident. This is a broken workflow every SysAdmin and network engineer knows all too well. To bypass this daily frustration, teams often resort to risky workarounds like scribbling temporary passwords on sticky notes or weakening password complexity so credentials are easier to type. For years, maintaining high security and operational practicality in restricted environments has felt mutually exclusive - until now. Introducing "Copy to YubiKey" in Devolutions Remote Desktop Manager (RDM). To solve this challenge, Yubico and Devolutions have partnered to introduce a powerful new feature in Devolutions Remote Desktop Manager (RDM): Copy to YubiKey. This new solution directly bridges the gap between legacy credential requirements and modern hardware security. Instead of forcing admins to choose between compliance and sanity, it turns the YubiKey they already carry into a secure, automated credential injector. Designed to be incredibly seamless for an admin already deep in the RDM dashboard, this feature works once a YubiKey is connected to their workstation. A new "Copy to YubiKey" action dynamically appears on credential entries within RDM. From there, the process takes only a few seconds: * Select the Credential: The admin locates the vaulted, high-entropy password within RDM. * Choose the Slot: They trigger the "Copy to YubiKey" action and select which hardware slot on the YubiKey they want to temporarily use (Slot 1 or Slot 2). * Program the YubiKey: RDM securely programs that specific credential directly into the chosen YubiKey slot as a static password. Because the YubiKey can act as a standard USB keyboard (Human Interface Device), a single physical press of the key instantly injects the credential into any text field - no software, network connection, or clipboard required. Security without the friction. "Copy to YubiKey" is about more than just convenience; it's about fortifying the security posture for the gatekeepers of your infrastructure. By combining Devolutions' connection management with Yubico's gold-standard phishing-resistant, hardware-backed passkeys, the joint solution delivers immediate operational advantages: * Passwords that work where 'copy-paste' doesn't Acting as a hardware keyboard, YubiKey instantly injects complex passwords into restricted interfaces like server consoles and BIOS prompts. * Eliminating the clipboard attack surface Bypasses system clipboards entirely, preventing risks from clipboard history, cloud syncing, and monitoring malware. * Maintaining strict governance and auditing Keeps credentials vaulted in Devolutions RDM so YubiKeys only store deliberately and traceably copied data. * Maximizing the hardware you already carry Uses existing YubiKey configuration slots to safely transport privileged credentials alongside standard MFA workflows. Instead of spending hours manually relaying authentication information between a phone and a terminal, administrators can now bypass the process entirely. Because the credential injects perfectly on the first try, users shift from being a reactive firefighter to a proactive architect. Instead of staring at account lockout screens, they are able to focus on high-value projects that push the business forward. Through this integration, Yubico and Devolutions are ensuring that when you must use a password, you can do so with the speed, accuracy, and physical assurance that modern enterprises demand. Ready to eliminate manual password typing in your restricted environments? * Ensure your team is running the latest version of Devolutions Remote Desktop Manager. * Check out the Devolutions RDM Listing in the Works with YubiKey Catalog for technical compatibility and setup details.

Yubico introduces YubiKey 5.8 with hardware-backed authorization for AI agent workflows. July 22, 2026 Yubico has released the YubiKey 5.8, a firmware update that extends the hardware security key beyond login authentication to verify and authorize digital actions, including approvals initiated by autonomous AI agents. Announced July 21, 2026, the update responds directly to the rise of agentic AI systems capable of executing complex business workflows with minimal human oversight. Traditional multi-factor authentication answers one question: who is logging in. As AI systems increasingly initiate transactions, approve documents, and trigger automated processes, security teams face a harder problem: confirming that a specific action was genuinely sanctioned by a human rather than spoofed mid-workflow. Yubico introduces YubiKey 5.8. YubiKey 5.8 tackles this by extending phishing-resistant, hardware-backed cryptography into signature and authorization use cases rather than just session logins. "YubiKey 5.8 represents one of the most significant architectural updates to the modern authentication ecosystem by expanding phishing resistance into the workflows themselves," said Albert Biketi, Yubico's chief product and technology officer. He added that organizations must now enable dynamic verification of human intent as AI agents take on high-consequence business tasks. Yubico introduces CTAP 2.3 support along with preview access to the emerging WebAuthn signing extension, enabling hardware-backed digital signatures through standard APIs without requiring custom cryptographic infrastructure. It also expands Enterprise Attestation to cover 16 Relying Party IDs per key, letting a single YubiKey operate across development, staging, and production environments spanning multiple identity providers while preserving user privacy. The update further adds support for digital identity wallets, privacy-preserving verifiable credentials, and Secure Payment Confirmation for hardware-backed web payments. Persistent PIN and user verification auth tokens cut down on repeated PIN prompts and enable smoother credential autofill, while a new autofill-style credential discovery mechanism works alongside software passkeys to reduce IT helpdesk enrollment overhead. Together, these changes let developers integrate high-assurance signing into document workflows, digital wallets, and AI approval gates using familiar WebAuthn and FIDO2-adjacent standards instead of building bespoke key management backends. Leif Johansson, executive director at the SIROS Foundation, called the signing capabilities "a game changer for digital identity and credentials," noting that FIDO authentication became the industry standard for phishing resistance over the past decade, and that adding signature support opens new applications without introducing platform lock-in. YubiKey 5.8 ships across all major YubiKey product lines starting immediately and remains fully backward-compatible with YubiKey 5.7.4. Two exceptions apply for regulated environments: the YubiKey FIPS Series stays on FIPS 140-3 validated firmware 5.7.4 to preserve compliance, and the YubiKey CCN Series also remains on 5.7.4 pending final re-certification. Organizations in FIPS or Common Criteria-regulated sectors should not expect 5.8 features until those certifications complete. The launch signals a broader industry shift, with authentication vendors treating AI agents as first-class actors in enterprise workflows that require cryptographic accountability. Enterprises building AI-driven approval chains or document-signing pipelines should evaluate whether hardware-backed signature verification closes gaps that session-based MFA leaves open, particularly around non-repudiation and human-in-the-loop validation. Cut SOC investigation blind spots and contain threats earlier to reduce response costs and business disruption with ANY.RUN.