Field notes from the edge.
What our engineers learned this week. Hands-on technical deep-dives, postmortems, and strategy frameworks.
AINew Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA
Three new research efforts have revealed vulnerabilities in passkey authentication systems that bypass their phishing-resistant protections without breaking underlying cryptography. The attacks exploit weaknesses in implementation rather than cryptographic flaws, including reusing exposed Windows authentication material, abusing cloud-synced passkey systems through malware, and other bypass techni
AIGoogle Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts
Security researchers at Unit 42 have identified critical vulnerabilities in Google Password Manager's passkey implementation that allow malware running with standard user privileges on Windows to authenticate to passkey-protected accounts without requiring biometric verification, PINs, or any user interaction. The researchers detailed three distinct attack vectors—Pass-ta-key, Silver Pass-ta-key,
AICloudflare DMARC Management is now generally available
Cloudflare has made its DMARC Management solution generally available with enhanced features to help organizations achieve full email authentication enforcement. The platform addresses the growing requirement from major email providers like Google, Microsoft, and Yahoo for proper DMARC, SPF, and DKIM configuration, offering free tools that eliminate the need for costly consultants or manual XML re
AI⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI-Powered Attacks, OAuth Phishing and More
This week saw a surge in critical security incidents including authentication vulnerabilities, actively exploited patches, and compromised development tools. AI-powered attack tools are lowering the barrier to entry for threat actors, while OAuth phishing campaigns and supply chain attacks through poisoned developer resources continue to proliferate. The security landscape reflects both persistent