📰 New Passkey Attacks Let Malware Take Over Google Accounts Without User Interaction

Malware sitting quietly on a compromised Windows PC can now hijack Google’s synced passkeys and seize full control of an account without ever prompting the victim for a password, PIN, or fingerprint. Arie Olshtein at Palo Alto Networks’ Unit 42 disclosed three attack techniques, collectively nicknamed Pass-ta-key, that exploit gaps in how Chrome...