Urgent.News

What's breaking now, across thousands of outlets.

Editions

Tech

New Phishing Toolkit Uses Passkeys to Maintain Access After Password Resets

Researchers say iAuthFlow V2 can register an attacker-controlled passkey, enabling persistent access even after passwords are changed and active sessions revoked. The post New Phishing Toolkit Uses Passkeys to Maintain Access After Password Resets appeared first on SecurityWeek .

We haven't written up this one. SecurityWeek has the full story — the link below goes straight to it.

Read the original at securityweek.com →

More in Tech

More from Friday 21 August →