Three separate research efforts last week demonstrated ways to defeat passkey protections without breaking the cryptography they rest on. Passkeys are designed to replace reusable passwords and resist phishing. The attacks instead reused signed authentication material that Windows had exposed, abused a cloudsynced passkey system from malware already on the victim's machine, and used a .📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity