SecurityBleepingComputerabout 2 hours ago
New Pass-ta-key attacks let malware hijack Google-synced passkeys
1 min read
Palo Alto Networks' Unit 42 discovered three Pass-ta-key attacks abusing Google Password Manager in Chrome on Windows TPM devices. The attacks let malware impersonate trusted devices, bypass user verification, and extract passkey master keys. Google removed the secret from logs but it remains accessible in Chrome's process memory.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyGoogle
