Tech9to5Googleabout 1 hour ago
Pass-ta-key attacks hijack Google-synced passkeys
1 min read
Palo Alto Networks' Unit 42 discovered three Pass-ta-key attacks that let malware on compromised Windows devices abuse Google Password Manager's synced passkeys, bypass user verification, and extract private keys. The attacks exploit Chrome and Google's cloud authenticator weaknesses, not passkey cryptography.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyGoogle
Summary by ByteBrief
