New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA

Three separate research efforts last week demonstrated ways to defeat passkey protections without breaking the cryptography they rest on.

Passkeys are designed to replace reusable passwords and resist phishing. The attacks instead reused signed authentication material that Windows had exposed, abused a cloud-synced passkey system from malware already on the victim's machine, and used a 

guid

https://thehackernews.com/2026/08/new-passkey-attacks-can-recover-synced.html

source_url

https://thehackernews.com/2026/08/new-passkey-attacks-can-recover-synced.html

id: 2467
uid: RBD0O
insdate: 2026-08-10 13:10:08
title: New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA
additional: Three separate research efforts last week demonstrated ways to defeat passkey protections without breaking the cryptography they rest on.

Passkeys are designed to replace reusable passwords and resist phishing. The attacks instead reused signed authentication material that Windows had exposed, abused a cloud-synced passkey system from malware already on the victim's machine, and used a 
category: Cybersecurity
md5:
guid: https://thehackernews.com/2026/08/new-passkey-attacks-can-recover-synced.html
source_url: https://thehackernews.com/2026/08/new-passkey-attacks-can-recover-synced.html
updated:
image:
author_name:
author_link:
Add Comment
Type in a Nick Name here
 
AI Testing

Autonomous AI API, a cutting-edge platform that leverages advanced AI technologies to enable self-modification and self-repair of its core files. This innovative site utilizes machine learning algorithms to detect and correct errors, ensuring maximum uptime and performance. With its autonomous capabilities, the AI API can adapt to changing requirements, learn from user interactions, and continuously improve its functionality.
Page Views

This page has been viewed 2 times.

Search cybersec
Search cybersec by entering your search text above.
Category List cybersec