Pass-ta-key attacks

Security researchers discovered three attacks allowing malware on compromised Windows devices to exploit Google Password Manager's synced passkeys, enabling account takeovers and bypassing user verification to extract private keys.