https://fixupx.com/getsquarex/status/1961055498804895782
The problem isn’t the cryptography, which remains intact. It’s the assumption that the browser itself is trustworthy, researchers believe.
FixupX
SquareX (@getsquarex)
Breaking the passkey promise wasn't supposed to be this easy.
At DEFCON 33, our research team disclosed a major passkey vulnerability that allows attackers to fake passkey registration and authentication through malicious browser extensions, enabling full…
At DEFCON 33, our research team disclosed a major passkey vulnerability that allows attackers to fake passkey registration and authentication through malicious browser extensions, enabling full…
