THREAT OPS › Threat News › Google’s synchronized passkeys can be stolen in ‘Pass‑ta‑key’ attacks
Google’s synchronized passkeys can be stolen in ‘Pass‑ta‑key’ attacks
<p class="wp-block-paragraph"><a href="https://www.malwarebytes.com/blog/how-to/2024/05/you-get-a-passkey-you-get-a-passkey-everyone-should-get-a-passkey">Passkeys</a> were supposed to make stolen passwords a thing of the past. No password to phish, no secret to reuse, and no string of characters sitting in a database waiting to be leaked.</p>
<p class="wp-block-paragraph">Over time, it’s
MITRE ATT&CK techniques
Indicators of compromise
- https://cybernews.com/security/google-passkeys-vulnerability-master-key-leaks/url
- https://fidoalliance.org/passkey-adoption-doubles-in-2024-more-than-15-billion-online-accounts-can-leverage-passkeys/url