CloudThe Hacker Newsabout 2 hours ago
Passkey Attacks Bypass Phishing-Resistant MFA
1 min read
Three research efforts demonstrated passkey attacks without breaking cryptography. SpecterOps exploited Windows-stored YubiKey signatures via CVE-2026-34348. Unit 42 recovered Google Password Manager synced passkey private keys. Mollema used Windows Hello for Business keys without fresh PIN checks. Microsoft issued updates and mitigations.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
