New Eucleak attack lets threat actors clone YubiKey FIDO keys:
A new "EUCLEAK" flaw found in FIDO devices using the Infineon SLE78 security ...
bleepingcomputer.com/news/security/new-eucleak-attack-lets-threat-actors-clone-yubikey-fido-keys/
Photo: bleepingcomputer.com · view article
EUCLEAK Vulnerability Threatens YubiKey SecurityEUCLEAK enables extraction of ECDSA keys from YubiKey 5 Series devices older than firmware 5.7, risking device cloning.
Key FactsSep 4, 2024 · Reading time: ~45 sec.
Summary created with AI assistance · Source: bleepingcomputer.com
Summary created with AI assistance · Source: bleepingcomputer.com
- EUCLEAK exploits a flaw in Infineon SLE78 microcontrollers used in FIDO devices to extract private ECDSA keys.
- The attack demands prolonged physical access, advanced equipment, and expertise in electronics and cryptography, limiting its threat level.
- Affected products include YubiKey 5 Series versions before 5.7, YubiKey Bio prior to 5.7.2, and YubiHSM 2 versions earlier than 2.4.0.
- Firmware cannot be upgraded to fix the flaw, so Yubico advises switching to RSA keys and enforcing shorter authentication sessions.
The EUCLEAK attack is a serious concern for highly vulnerable targets, but not for the average user.— Thomas Roche, who discovered the EUCLEAK flaw and devised the attack.
Story Details
| Last Updated | |
| Total Articles | 1 |
Main Topics
software that is intentionally hostile, intrusive, or damaging to a computer or network
Similar to This
Previous
Yubico Security Key C NFC: Affordable, simple, and super secure, the Yubico Security Key C NFC is the top option for most multi-factor authentication scenarios ...
uk.pcmag.com/security/147752/yubico-security-key-c-nfc
Yubico YubiKey 5C NFC: The YubiKey 5C NFC is a durable, highly versatile hardware security key that supports a wide range of authentication standards and ...
uk.pcmag.com/security/134490/yubico-yubikey-5c-nfc
Yubico YubiKey 5C NFC: The YubiKey 5C NFC is a durable, highly versatile hardware security key that supports a wide range of authentication standards and ...
uk.pcmag.com/security/134490/yubico-yubikey-5c-nfc
Yubico opens Singapore office to speed YubiKey delivery: Yubico AB is expanding in Singapore, opening a regional hub to customise and distribute its ...
sbr.com.sg/exclusive/yubico-opens-singapore-office-speed-yubikey-delivery
The Best Hardware Security Keys for 2025: Protecting your online accounts is crucial, and a hardware security key is one of your effective defenses ...
uk.pcmag.com/security/136832/the-best-security-keys-for-multi-factor-authentication
Yubico YubiKey 5C NFC: A security key with diverse multi-factor authentication protocols
uk.pcmag.com/password-managers/134490/yubico-yubikey-5c-nfc
Yubico Security Key C NFC: Affordable, simple, and super secure, the Yubico Security Key C NFC is the top option for most multi-factor authentication scenarios ...
uk.pcmag.com/security/147752/yubico-security-key-c-nfc
A security key for every employee? Yubikey-as-a-Service goes global: Yubico's roaming authenticators can now be provisioned and delivered in 175 countries ...
zdnet.com/article/a-security-key-for-every-employee-yubikey-as-a-service-goes-global/
Yubico Yubikey 5C NFC Review: Packed With Features for Power Users: The YubiKey 5C NFC is a durable, highly versatile hardware security key that supports a wide ...
pcmag.com/reviews/yubico-yubikey-5c-nfc
Next