Chrome’s WebUSB Feature Leaves Some Yubikeys Vulnerable to Attack

Chrome’s WebUSB Feature Leaves Some Yubikeys Vulnerable to Attack

There’s no better way to protect yourself from the universal scourge of phishing attacks than with a hardware token like a Yubikey, which stymies attackers even if you accidentally hand them your username and password. But while Yubikey manufacturer Yubico describes its product as “unphishable,” a pair of researchers has proven the company wrong, with …