1. Passkey Phishing Defenses Consistently Bypassed in Red Team Assessments, Security Researcher Finds
A security researcher operating in phishing assessment engagements reports a troubling pattern: passkeys, widely promoted as phishing-resistant authentication, can be defeated with reliable regularity using a specific class of relay and injection techniques. The researcher, who conducts these assessments professionally...