Tag: Pass-ta-key

Security researchers have uncovered three Pass-ta-key attacks that let malware abuse Google Password Manager’s synced passkeys on compromised Windows devices. The attacks can hijack accounts, bypass user verification in certain cases, and extract the private keys behind synced passkeys. They target Chrome on Windows systems that use a Trusted Platform Module, or TPM. Palo Alto…