Google: Security Keys Neutralized Employee Phishing — Krebs on Security

https://krebsonsecurity.com/2018/07/google-security-keys-neutralized-employee-phishing/

Such a simple authentication factor (simulating a keyboard) but very powerful in what it delivers.

All organisations should consider these devices for end users.