#9
SecurityWeek
general
August 05, 2026 at 12:48 UTC
New Attack Methods Enable Malware to Hijack Passkey-Protected Accounts
By Eduard Kovacs
AI Summary
Palo Alto Networks researchers demonstrated novel attack methods that allow malware to hijack passkey-protected Google accounts by exploiting Google's synced passkey implementation, undermining a core assumption that passkeys are phishing-resistant and malware-resistant authentication. The research reveals that syncing passkeys across devices introduces a new attack surface that threat actors can exploit post-compromise to achieve persistent account access.
Relevance score: 78.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →