39 New Methods That Compromise Passkey Authentication

At least 39 publicly documented methods compromise passkey authentication without breaking FIDO2 cryptography. SpecterOps' Pass the Passkey research shows malware can request legitimate signed assertions from Windows WebAuthn infrastructure. Dedicated biometric hardware eliminates cloud sync, exports, and third-party apps, reducing attack surface.