Find a story
Search Spins
Search titles, summaries, and missing voices across published articles — press releases, announcements, and media coverage.
0 results for “passkeys”
New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA
Researchers demonstrated three novel attack vectors against passkey implementations that exploit system-level exposures and cloud sync behaviors—not cryptographic weaknesses—raising concerns about real-world passkey security assumptions.
Aug 10, 2026
New Pass-ta-key attacks let malware hijack Google-synced passkeys
Security researchers identified three novel malware-based attacks that exploit Google's synced passkey infrastructure on compromised Windows devices to steal private keys and hijack accounts without user verification.
Aug 4, 2026
Flaws in Passkey Implementation Show Old Attacks Still Work
Researchers identified exploitable flaws in Microsoft's passkey implementation that could enable attackers to impersonate privileged users, highlighting persistent vulnerabilities in modern authentication systems.
Jul 23, 2026
Microsoft Entra ID gets passkeys default authentication starting September
Microsoft will make passkeys the default authentication method for its Entra ID enterprise identity service beginning September 2026, shifting away from legacy multi-factor authentication (MFA) methods.
Jul 14, 2026
The Verification Step Is the New ATO Battleground in 2026
Passkeys have become mainstream, shifting the ATO battleground from credential stuffing to verification-step exploitation as of 2026.
Jul 9, 2026
Built-In Authenticators (Passkeys) for MFA - Salesforce
Salesforce announced built-in passkey support for multi-factor authentication (MFA) across its platform, enabling passwordless login using device-native authenticators.
Published May 28, 2026 · Analyzed Jul 25, 2026