Users advised to drop passwords and make room for passkeys

Collection of security news: the UK NCSC is urging consumers to replace passwords with passkeys as preferred authentication; researchers and vendors report growing indirect prompt injection (IPI) threats targeting LLM-powered agents; the NCSC warns China-linked actors are building large botnets from compromised routers and edge devices and published guidance; CISA and the UK NCSC/CERTs disclosed Firestarter — a suspected state‑sponsored backdoor persistently implanting Cisco Firepower/Secure Firewall devices (observed on Firepower/ASA) that may require power cycling to remove; Meta is rolling