> TritonInfoSec News
Home / Aug 23, 2026 / Story
0
#4 SecurityWeek general August 21, 2026 at 14:22 UTC

New Phishing Toolkit Uses Passkeys to Maintain Access After Password Resets

By Kevin Townsend

AI Summary

A new phishing toolkit called iAuthFlow V2 can register attacker-controlled passkeys during a phishing session, enabling persistent account access even after the victim resets their password and revokes active sessions. This directly undermines a core security assumption of passkey adoption and is critical intelligence for identity and authentication teams evaluating FIDO2 rollouts.

Read full article → https://www.securityweek.com/new-phishing-toolkit-…

Relevance score: 78.0/100

# More from August 23

  1. 1
    SickKids data breach exposes employee and job applicant info BleepingComputer
  2. 2
    CISA Urges Immediate Patching of Exploited TrueConf Vulnerabilities SecurityWeek
  3. 3
    Microsoft Rolls Out 22 Fresh Security Patches SecurityWeek
  4. 5
    Critical Isolated-vm Vulnerability Leads to RCE on Host SecurityWeek
  5. 6
    Encrypted Prompts Bypass AI Safety Guardrails in Grok and Gemini SecurityWeek
  6. 7
    New SynkLoader malware pushed in Microsoft Teams phishing campaign BleepingComputer
  7. 8
    14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2 The Hacker News
  8. 9
    More Incidents of AIs Going Rogue in Cybersecurity Challenges Schneier on Security
  9. 10
    Hackers abuse FTP server banners to deliver new Windows malware BleepingComputer