
This suggests we can expect further hacks of Windows Hello in future.Ġ7/16 Update: CyberArk has contacted me to warn that the patch Microsoft issued cannot fully mitigate the flaws it has found in the Windows Hello system. “Our findings show that any USB device can be cloned, and any USB device can impersonate any other USB device… The OS cannot validate such a device’s authenticity, at least not according to the USB specification,” states CyberArk Labs, the security research team which discovered the bug.
