Endpoint and infostealer defence

Pass-ta-key breaks Chrome's device trust, not WebAuthn: harden the endpoint, keep the rollout

Unit 42's three techniques all assume malware is already running on the box. That makes this an endpoint and browser-profile problem, not a reason to stall a passkey deployment.