Three independent research efforts presented at Black Hat USA 2026 and in subsequent disclosures have demonstrated practical attacks against passkey implementations, undermining…
SpecterOps presented Pass-the-Passkey at Black Hat USA 2026, showing that Windows stores YubiKey signatures in cleartext, enabling privileged-user impersonation via Microsoft Entra…
Windows stores past YubiKey signatures in cleartext, which can be read by unprivileged users and replayed to impersonate users. This issue is…
Black Hat USA 2026 featured the presentation of Pass-the-Passkey by SpecterOps, highlighting vulnerabilities in Windows and Microsoft Entra ID passkey implementations.