Google Password Manager Flaw Allows Malware to Hijack Passkeys
Security researchers have uncovered three attack techniques allowing malware on compromised Windows machines to silently hijack passkey-protected accounts stored in Google Password Manager. Disclosed by Palo Alto Networks’ Unit 42, the methods target Chrome’s synchronization infrastructure and cloud authenticator without breaking underlying public-key cryptography. Modern passwordless security relies on asymmetric cryptography to eliminate phishing and … Read more