New Passkey Attacks Recover Private Keys and Bypass MFA
Researchers revealed new attack techniques targeting passkey implementations, potentially recovering synced private keys or bypassing phishing-resistant multi-factor authentication. This undermines the security assumptions of passwordless login systems, requiring users and organizations to review their authentication defenses and apply necessary patches.