New Pass-ta-key attacks let malware hijack Google-synced passkeys

Let op: Dit artikel is automatisch opgehaald uit een externe bron en nog niet vertaald of bewerkt. Publicatie vereist handmatige review.

Originele bron: BleepingComputer

---

Security researchers have discovered three attacks that allow malware on already-compromised Windows devices to abuse Google Password Manager’s synced passkeys to take over accounts, bypass user verification, and extract passkey private keys. […]

Bron: BleepingComputer — Lees het volledige artikel

Gerelateerde artikelen

ToolsGoogle Password Manager Attacks Could Let Malware Hijack Passkey-Protected AccountsMalware running as an ordinary user on a Windows machine can sign into a victim's passkey-protected accounts without a fingerprint, a PIN, or anything at all appearing on the victi...3 aug 2026Tools77 Open VSX extensions found harvesting developer info77 extensions on the Open VSX marketplace impersonated legitimate developer tools while transmitting information about the systems and development environments where they were inst...4 aug 2026ToolsAI Notetaker Lets Hackers Spy on Government, Corporate Video CallsA Google Firebase misconfiguration lets users of tl;dv, an AI meeting tool, query any other users' meeting information and potentially join calls.4 aug 2026Tools18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool UsersCybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a cross-platform remote access trojan (RAT) as part...3 aug 2026