August 17, 2026
- "Pass-the-Passkey" family of WebAuthn attacks. Michael Grafnetter published an exploitation demo for CVE-2026-34348 from his Black Hat USA talk, showing WebAuthn assertions being replayed/relayed — a passkey attack class worth watching for identity teams betting on FIDO2 (@thegrugq). · Vulnerabilities & Exploits
in One Video Call to Kernel: Unisoc Baseband Chain Gives Full Android Takeover