New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA

Summary

Three separate research efforts last week demonstrated ways to defeat passkey protections without breaking the cryptography they rest on. Passkeys are designed to replace reusable passwords and resist phishing. The attacks instead reused signed authentication material that Windows had exposed, abused a cloud-synced passkey system from malware already on the victim's machine, and used a 

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.