TLDR · QUICK LINKS
YUBIKEYS ARE VULNERABLE TO CLONING ATTACKS THANKS TO NEWLY DISCOVERED SIDE CHANNEL
Summary from the TLDR newsletter
The YubiKey 5 contains an unpatchable cryptographic flaw that makes it vulnerable to cloning if an attacker gains temporary physical access to it - all YubiKeys running firmware prior to version 5.7 are permanently vulnerable.