Dan Goodin / Ars Technica:
Researchers detail a side channel attack, requiring ~$11K of worth of equipment, which can be used to clone all YubiKeys running firmware prior to version 5.7 — Sophisticated attack breaks security assurances of the most popular FIDO key. — The YubiKey 5, the most widely used hardware token …