New Attack Surface Found in Passkey-Based Passwordless Authentication

Researchers have identified a novel attack surface in passkey-based passwordless authentication systems, potentially undermining their security guarantees. The attack exploits implementation flaws or design oversights in how passkeys are used across devices and services. This matters because passkeys are increasingly adopted as a phishing-resistant replacement for passwords, and any weakness could affect widespread enterprise and consumer authentication.

Sources (1)