Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts

The Hacker News 3 August 2026, 19:24 EEST Security Browsers

Malware running as an ordinary user on a Windows machine can sign into a victim's passkey-protected accounts without a fingerprint, a PIN, or anything at all appearing on the victim's screen. Unit 42 detailed three attack paths against Chrome's Google Password Manager cloud authenticator, which it calls Pass-ta-key, Silver Pass-ta-key and Golden Pass-ta-key; the strongest targets the master key…

Read the full story on The Hacker News https://thehackernews.com/2026/08/google-password-manager-attacks-could.html

Attacks like this land on ordinary sites far more often than on chosen targets. If you would rather your site never became the story, CrockyHost hosting ships with daily backups, automatic updates and a firewall we manage.

Keep reading

Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps The Hacker News
Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets The Hacker News
Clop created custom web shell for Windchill data theft attacks BleepingComputer
Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000 The Hacker News