Researchers Identify New Attack Vectors Targeting Passkey Authentication Systems

Security researchers at Palo Alto Networks' Unit 42 have identified novel attack surfaces within passwordless authentication systems, particularly those using passkeys. The research highlights that while passkeys are designed to replace traditional passwords and improve security, they introduce their own set of exploitable vulnerabilities. Attackers may be able to abuse the underlying protocols or implementation flaws to compromise accounts even without needing a password. The findings serve as a reminder that no authentication method is entirely immune to attack, and organizations adopting passkeys should remain vigilant about their specific security risks.