39 New Methods That Compromise Passkey Authentication

This sponsored whitepaper documents 39 published attack methods against passkey/FIDO2 authentication—covering UI spoofing, assertion capture/replay, sync/export compromise, enrollment/recovery abuse, and other surrounding ecosystem weaknesses—and argues that dedicated biometric hardware plus strict enrollment/recovery controls are required to reduce the expanded attack surface.