Breaking Lab srl
Malware Can Hijack Passkey Accounts Without Any User Prompt
Unit 42 researchers have detailed three attack paths that allow ordinary user-level malware on Windows to silently sign into passkey-protected accounts via Google Password Manager. The findings raise serious questions about passkeys as a silver-bullet authentication solution.
