#passkey


Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

Sep 13, 2026 // 13:21

Microsoft has disclosed details of two campaigns in which threat actors are abusing third-party email delivery infrastructure to blast financial fraud scam messages and using […]

39 New Methods That Compromise Passkey Authentication

Sep 4, 2026 // 19:17

Passkeys were introduced with a strong security proposition. Replace passwords with public key cryptography, bind the credential to the legitimate service, keep the private key […]

New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA

Aug 10, 2026 // 18:40

Three separate research efforts last week demonstrated ways to defeat passkey protections without breaking the cryptography they rest on. Passkeys are designed to replace reusable […]

Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access

Jul 10, 2026 // 16:46

A threat actor has been targeting organizations spanning multiple sectors with voice-based fake security requests that prompt Microsoft 365 users to enroll a new Entra […]

Entra passkey enrollment vishing targets Microsoft 365 users

Jul 8, 2026 // 19:57

A threat actor has been targeting organizations across multiple sectors with voice-based fake security requests that ask Microsoft 365 users to enroll a new Entra […]