Pass the Passkey: A Novel Attack Surface in Passwordless Authentication
2026-08-03T20:51:31Z•7d8ae364d782d729a194e7f8a606e7ff861ddd3f1d787c9c25958b1e48656116
AI-assisted attacksDLL sideloadingIoT botnetJavaScript injectionMFA bypassOT securityOpenClawPalo Alto Networks Unit 42Siemens ROX IITinyRCTTuxBotVidar StealerWebAuthnXCSSETZimbracredential attackscritical infrastructurecyberespionagemacOS malwarenpm supply chainpasskeysransomwaresoftware supply chainthreat-intelligencezero-day
What happened
Palo Alto Networks Unit 42 RSS content covering emerging and active cybersecurity threats, including passkey/WebAuthn implementation weaknesses, XCSSET macOS malware, AI-assisted cyberattacks, Russian espionage against Zimbra webmail, Siemens ROX II OT zero-days, npm and AI supply-chain attacks, IoT botnets, ransomware, Vidar Stealer, credential attacks, and state-linked activity targeting governments and critical infrastructure.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- paloalto_unit42
- Record identifier
- 7d8ae364d782d729a194e7f8a606e7ff861ddd3f1d787c9c25958b1e48656116
- Enrichment time
- 2026-08-03T20:51:31Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.