Unit 42 demonstrates attack paths against Google-synced passkeys on Windows
· research benchmark · Google
Unit 42 published research describing three attack paths affecting Google Password Manager and Chrome passkey implementations on Windows. The demonstrations assume malware or prior endpoint compromise and target implementation and key-handling around synchronized passkeys; they do not break WebAuthn public-key cryptography itself.