News Summary

Recent research by SquareX, a startup focused on securing browsers and client-side applications, has made bold claims about a supposed vulnerability in passkey technology. The research, titled ‘Passkeys Pwned,’ suggests that a malicious browser extension can hijack the passkey creation process, allowing attackers to gain access to cloud applications by creating a keypair controlled by malware. Despite these claims, the research has been criticized for lacking substantial evidence and being more of a marketing pitch than a credible security threat. This has sparked discussions on the security of passkeys, which are considered a more secure alternative to traditional passwords.