TLDR · QUICK LINKS

YUBIKEYS ARE VULNERABLE TO CLONING ATTACKS THANKS TO NEWLY DISCOVERED SIDE CHANNEL

arstechnica.com9 min read

Summary from the TLDR newsletter

The YubiKey 5 contains an unpatchable cryptographic flaw that makes it vulnerable to cloning if an attacker gains temporary physical access to it - all YubiKeys running firmware prior to version 5.7 are permanently vulnerable.