Security researchers Via BleepingComputer have now found three ways malware can undermine those promises for passkeys synced through Google Password Manager. The techniques, collectively named Pass ta key, target Google Password Manager inside Chrome on Windows computers equipped with a Trusted Platform Module. Every attack requires malware to already be running on the victim’s computer. The researchers did not break the cryptography behind passkeys. They exploited weaknesses in device...
