New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA

Three recent research findings revealed vulnerabilities in passkey authentication systems, including Windows and Google Password Manager, allowing attackers to bypass phishing-resistant multifactor authentication without breaking cryptography.