Attackers have found ways to exploit the authentication process around passkeys, focusing on opportunities outside the direct passkey mechanism.
Earlier attacks and coverage
No earlier related attack in our archive yet.
Business impact
Organizations face increased risk as passkey authentication does not fully address broader identity security issues, potentially leading to operational disruptions and security breaches.
Industries affected
All industries, as the issue affects the fundamental security of digital identities.
Users affected
Users must remain vigilant against social engineering and phishing, as passkeys alone do not eliminate the risk of identity compromise.
Build these skills
Watch the daily brief
Sources
- Passkeys Are Better Than Passwords. But They Are Not Enough. (SecurityWeek)
