Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts
Unit 42 researchers have disclosed three attack paths against Google Password Manager in Chrome on Windows, which could allow malware already running…
Tag: passkey
Google Password Manager: Passkey Security Risks Exposed
Unit 42 identified three attack paths against Google Password Manager's cloud authenticator, potentially allowing malware to hijack passkey-protected accounts on Windows with…
Microsoft Entra: Identity and Access Management Product Abused in Phishing
Microsoft Entra is Microsoft's cloud-based identity and access management service. Attackers are using fake passkey enrollment pages that mimic Entra's passkey registration…
eBay Addresses User Verification Gap in Passkey Implementation
eBay was found to have accepted a test authentication assertion without the User Verified flag, but fixed the validation gap after disclosure,…
Chrome Browser’s Passkey Implementation Under Fire
Chrome's handling of passkey device keys and security domain secrets has been scrutinized, with researchers demonstrating potential attack vectors that could compromise…
GitHub Enforces User Verification for Passkey Authentication
GitHub was noted in Unit 42's research as correctly enforcing the User Verified flag requirement, rejecting assertions that lack it.
Palo Alto Networks’ Unit 42 Discloses Passkey Attack Paths
Unit 42, the threat intelligence arm of Palo Alto Networks, detailed three techniques targeting Google Password Manager's cloud authenticator, highlighting potential weaknesses…