Breaking WebAuthn, FIDO2, and Forging Passkeys

Forging Passkeys: Exploring the FIDO2 / WebAuthn Attack Surface