Video: Passkeys Are Phishing-Resistant. Until Malware Skips the Browser
I joined Merill Fernando on Entra.Chat to discuss some of my findings on Passkey security:
The conversation covers several themes from my recent Black Hat USA 26 talk about Pass-the-Passkey attacks, including how real-world Passkey implementations can fail when attackers bypass the browser and target the surrounding authentication flow.
DSInternals