Passkeys Were Supposed To Save Us All

Because nothing in IT ever works as advertised, Palo Alto Networks researchers demonstrated how malware hijacks Google's synced passkey accounts. Malware can now apparently bypass the shiny new authentication standard we were promised would save us from human error. Everyday users trusting Google's synced passkeys were left exposed to simple account hijacking. Surviving this latest authentication disappointment requires deploying endpoint protection, isolating untrusted binaries, and enforcing strict device compliance.