The web platform, browsers, AI and security, taken apart: news, analysis and research from the FuriaHub team.
WhatsApp said more than a billion people are protected with a passkey, and Android and iOS accounts can now store more than one. The company is also replacing the six-digit two-step verification PIN with a longer alphanumeric password that can include special characters.
Abnormal Security described a $10,000 kit sold on Russian forums that uses a browser-in-the-middle flow, then enrolls a rogue passkey once the victim signs in for real. Demos focused on Google; the sellers also advertised iCloud, LinkedIn, and Microsoft.
OpenAI’s August 10 Daybreak post said the purpose-trained cyber model found two unknown V8 issues that chained to a heap-sandbox escape. Google patched Chrome 150.0.7871.128. Daybreak accounts need hardware keys by September 1.
FuriaHub