Think passkeys make you phishing-proof? Think again. Attackers are using downgrade attacks, device-code phishing, and OAuth tricks to sneak past modern MFA. See how Push Security shuts them down.
First seen on bleepingcomputer.com
Jump to article: www.bleepingcomputer.com/news/security/how-attackers-are-still-phishing-phishing-resistant-authentication/
