Users advised to drop passwords and make room for passkeys

News roundup highlights a major push by the UK NCSC to replace passwords with passkeys as the preferred consumer authentication method; growing real-world abuse of indirect prompt injection targeting LLM-powered agents; and an NCSC advisory on China-linked large-scale covert networks built from compromised routers and edge devices. CISA and the UK NCSC warn of a persistent, likely state-sponsored backdoor ("Firestarter") affecting Cisco Firepower/Secure Firewall devices that in observed cases can only be removed by power-cycling hardware. Other items: Meta consolidating account sign-in/setting