As Passkeys make progress, we need to ensure we understand the potential risks.
At this year's DEF CON conference in Las Vegas, white hat security researchers demonstrated how threat actors could use a clickjack attack to surreptitiously trigger and hijack a passkey-based authentication ceremony.