Studie zum Umgang mit Passkeys: Nutzer wissen zu wenig Bescheid
Teaser from the source
Passkeys sollen Passwörter ablösen, sie gelten als viel sicherer. In der Praxis fehlt vielen Nutzern noch Wissen, haben US-Forscher herausgefunden.
This is the RSS-feed teaser. Read the full article at the original source.
Read at heise SecurityMore on Passkeys
Other advisories
- MediumCVE-2026-106264Fehlende Zugriffskontrolle in der Web-Authentifizierung (Passkeys & Sicherheitsschlüssel) in Google Chrome vor Version 155.
- Not ratedosv:CVE-2026-54460OpenReception: Unauthenticated WebAuthn passkey injection via `POST /api/auth/passkeys` leads to account takeover
- MediumCVE-2026-79178Chromium: CVE-2026-79178 Incorrect authorization in Web Authentication (Passkeys & Security Keys)
- MediumCVE-2026-79108Chromium: CVE-2026-79108 UI misrepresentation in Web Authentication (Passkeys & Security Keys)
- MediumCVE-2026-64866New API: Admin can reset passkeys for same-level or higher-privileged users in github.com/QuantumNous/new-api
- MediumCVE-2026-64866New API: Admin can reset passkeys for same-level or higher-privileged users
- MediumCVE-2026-64866New API: Admin can reset passkeys for same-level or higher-privileged users
- Not ratedosv:CVE-2026-64866New API: Admin can reset passkeys for same-level or higher-privileged users
Other news entries
- mSecure password manager hack prompts password reset warningsNewsBleepingComputer
- mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious ActivityNewsThe Hacker News
- Password manager mSecure tells users to change passwords, won't say whyNewsThe Register — Security
- mSecure password manager hack: encrypted mSecure Cloud vault database reportedly stolen, users told to change passwordsBreachpwn.watch
- Passkeys Are Better Than Passwords. But They Are Not Enough.NewsSecurityWeek
- Microsoft urges Entra ID admins to migrate users to passkeysNewsBleepingComputer
- Microsoft reminds admins to migrate Entra ID users to passkeysNewsBleepingComputer
- UK.gov begins killing off passwords for 23 million usersNewsThe Register — Security
ID