Security News > 2024 > September > New Eucleak attack lets threat actors clone YubiKey FIDO keys

New Eucleak attack lets threat actors clone YubiKey FIDO keys
2024-09-04 17:48

A new "EUCLEAK" flaw found in FIDO devices using the Infineon SLE78 security microcontroller, like Yubico's YubiKey 5 Series, allows attackers to extract Elliptic Curve Digital Signature Algorithm (ECDSA) secret keys and clone the FIDO device. [...]


News URL

https://www.bleepingcomputer.com/news/security/new-eucleak-attack-lets-threat-actors-clone-yubikey-fido-keys/