NEW PASS-TA-KEY ATTACK REVEALS ALL THE THINGS WE DIDN'T KNOW ABOUT PASSKEYS

Summary from the TLDR InfoSec newsletter

Pass-ta-key malware can steal passkeys from an infected Windows PC using Google Password Manager. It may pose as an iPhone, then use Google's device-sync feature to copy the victim's saved passkeys. Windows lets malware access other apps' data more easily than Apple and Android systems. A malware-infected, signed-in PC can also expose passwords and active sessions.