The YubiKey 5, the most widely used hardware token for two-factor authentication, contains a cryptographic flaw that makes it vulnerable to cloning when briefly accessed by an attacker.
Researchers confirmed that all YubiKey 5 series models can be cloned, raising concerns that devices running similar microcontrollers like SLE78 also share this vulnerability.
Patching the vulnerability is impossible as updating firmware on YubiKeys is not supported, leaving numerous devices permanently at risk of attack.
An attacker exploiting this flaw would need physical possession of the YubiKey and potentially private account information, highlighting the sophistication of such targeted attacks.
Collection
[
|
...
]