39 New Methods That Compromise Passkey Authentication

By Sponsored by Token

AI Summary

Token researchers documented 39 distinct attack methods against passkey-based authentication systems, targeting abuse of authentication prompts, synced credentials, enrollment flows, recovery mechanisms, and trust boundaries — all without breaking underlying FIDO2 cryptography. Security architects deploying passkeys should review these attack categories to ensure their implementations don't expose alternative compromise paths.

Read full article → https://www.bleepingcomputer.com/news/security/39-…

Relevance score: 80.0/100

# More from September 06

1
Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores The Hacker News
2
Google warns of new Chrome zero-day flaw exploited in attacks BleepingComputer
3
Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials The Hacker News
4
Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code The Hacker News
5
Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities The Hacker News
6
Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel The Hacker News
8
Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain BleepingComputer
9
Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites SecurityWeek
10
US offers $10 million for info on Iranian allegedly behind cyberattacks on critical infrastructure The Record