Ahead of Black Hat USA, researchers find exploitable flaws in how Microsoft handles passkeys that could allow attackers to impersonate privileged users.
Flaws in Passkey Implementation Show Old Attacks Still Work
Summary + source link. No paywalls, no tracking.