Googleパスワードマネジャーに脆弱性 パスキーで守られたアカウント乗っ取る3つの攻撃手法、米パロアルトが警鐘
Palo Alto Networks' research team disclosed three attack methods exploiting a vulnerability in Google Password Manager to hijack passkey-protected accounts, warning of increased security risks as some attacks succeeded.
Key points
- •Palo Alto Networks' Unit 42 identified and disclosed three types of attack methods against Google Password Manager.
- •These methods enable the hijacking of passkey-protected accounts, with some instances of successful attacks.
- •Security firms are warning that vulnerabilities and attack vectors exist even in new authentication methods.