A terrifying new scam is sweeping across the US, catching people off guard by using QR codes to drain their bank accounts.

Think passkeys make you phishing-proof? Think again. Attackers are using downgrade attacks, device-code phishing, and OAuth ...